XP Startup - Password Screen - Keys/Mouse Pad Not Working

[cwaddell27]

I have an Acer Aspire 5672 with Windows XP Home Edition.

Yesterday I started up my laptop and it did a disk check and found no problems then went to the password screen. Once it got to that screen none of the keys on my laptop worked and neither did my mouse pad so couldn't put the password in. I could only move the cursor with my mouse which plugs into the usb - it is has a fingerprint scanner on the reciever end which was also not working. When I put the cursor over the password box it changed to a hand and I couldn't click in it so still cant put in the password. The mouse also only works if it is plugged in when I turn it on and not if it's plugged in once it gets to the password screen.

 

During startup I pressed F2 and saw under PhoenixBIOS Setup Utility that Password on Boot was Disabled and Set User Password wasnt able to be clicked on.

 

I restarted it over 10 times now and have taken out the battery and put it back in, left it overnight and tried again and still no difference. I also did a system restore to 3 days ago when it was working fine but the same thing is still happening.

 

I did manage to start up in safe mode and once it has started the mouse pad works and I can access everything so cant figure out why it is having problems at the password screen.

 

I am running all anti-virus programs I have (avg/symantec/avast) and am also defragmenting to see if it'll help. I have just changed the settings so I dont have to enter the password to see if it'll let me in but am still waiting for all scans to finish.

 

Also during safe mode when I plugged in my flash drive it didn't show up but dont know if that was just because its in safe mode.

 

Does anyone know what the problem is and how to fix it?

[Guest Wolfeymole]

Why are you running multiple anti virus programs?

 

Uninstall AVG and Norton and just run with Avast.

[Dalo Harkin]

Seeing as though it came up with check disk then chances are the PC didnt shut down properly or the OS detected an error with the HDD - as you are saying that system restores dont work and neither do the mouse or Keyboard - these are drivers that load with Windows - the HDD is either on the way out or the OS is corrupt.

[Seth]

During startup I pressed F2 and saw under PhoenixBIOS Setup Utility that Password on Boot was Disabled and Set User Password wasnt able to be clicked on.

Those passwords preclude XP and have nothing to do with the log in password.

[Goku]

Those passwords preclude XP and have nothing to do with the log in password.

Hello and Welcome to Extreme Tech Support - Free PC Help Wad. :)

 

I completely agree with Seth on this. Do not enable / disable those settings to attempt to correct your problem. It may result in you being locked out of your own problem.

 

As for your problem, it is very strange. Why did the disk check run automatically on boot? Had you scheduled it for next boot? If not, then was the computer improperly shut down?

 

For the symptoms you are mentioning, I would blame them on a corruption in the registry, user account or the operating system itself. Also, like Dalo already suspects, it might be that the hard drive might be dying.

 

Please answer the above questions so we may advise you accordingly.

 

-- Goku

[cwaddell27]

My laptop didnt have any problems shutting down before it had the disk check, and it hadnt been scheduled. My parents went into a computer shop to see if they could take a look at it but arent able to yet but said it might be a problem with the mouse driver and that I should try to uninstall it. I tried to uninstall something earlier in safe mode and it doesnt uninstall so does anyone know how I can remove it in safe mode?

 

Also tried removing the password in safe mode so I dont have to type it in but it didnt work either - the screen now only says welcome in the center and doesnt show my user icon or the shut down button so will try and put it back on.

 

I dont think there is a problem with the hard drive because I can still access all of my files in safe mode.

 

After restarting again the disk check came up again and said:

 

volume serial number is 320-180E

windows is verifying files and folders...

\documents and settings/ christopher waddell\local settings\application data\microsoft\credentials\5-1-5-21-631266650-4171102236-2605988554-1006\credentials first allocation unit is not valid. the entry will be truncated.

 

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ strtab_eManager.ini first allocation unit is not valid. the entry will be truncated.

 

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ ACER ELOCK.CHM first allocation unit is not valid. the entry will be truncated.

[Dalo Harkin]

My laptop didnt have any problems shutting down before it had the disk check, and it hadnt been scheduled. My parents went into a computer shop to see if they could take a look at it but arent able to yet but said it might be a problem with the mouse driver and that I should try to uninstall it. I tried to uninstall something earlier in safe mode and it doesnt uninstall so does anyone know how I can remove it in safe mode?

 

Also tried removing the password in safe mode so I dont have to type it in but it didnt work either - the screen now only says welcome in the center and doesnt show my user icon or the shut down button so will try and put it back on.

 

I dont think there is a problem with the hard drive because I can still access all of my files in safe mode.

 

After restarting again the disk check came up again and said:

 

volume serial number is 320-180E

windows is verifying files and folders...

\documents and settings/ christopher waddell\local settings\application data\microsoft\credentials\5-1-5-21-631266650-4171102236-2605988554-1006\credentials first allocation unit is not valid. the entry will be truncated.

 

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ strtab_eManager.ini first allocation unit is not valid. the entry will be truncated.

 

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ ACER ELOCK.CHM first allocation unit is not valid. the entry will be truncated.

 

They seem like your fingerprint scanner drivers :eek:

[Seth]

Those errors indicate a corruption in the XP files. Whether or not it's being caused by a failing drive or something else, is yet to be determined.

 

From the safe mode menu, choose last Known Good Configuration and see if it helps.

 

If not, i would attempt a system restore from safe mode.

[cwaddell27]

Those errors indicate a corruption in the XP files. Whether or not it's being caused by a failing drive or something else, is yet to be determined.

 

From the safe mode menu, choose last Known Good Configuration and see if it helps.

 

If not, i would attempt a system restore from safe mode.

 

 

I tried system restore and last known good configuration but same thing is still happening. Someone in a computer shop said to uninstall the mouse/fingerprint scanner too but not sure how to do that in safe mode as it wasnt letting me before.

[Goku]

Is USB Legacy Support enabled in the BIOS? If not, then please enable it and see if the Keyboard and Mouse work or not.

 

-- Goku

[cwaddell27]

Is USB Legacy Support enabled in the BIOS? If not, then please enable it and see if the Keyboard and Mouse work or not.

 

-- Goku

 

How do I check/enable that because I'm not sure what that is.

[Seth]

I tried system restore and last known good configuration but same thing is still happening. Someone in a computer shop said to uninstall the mouse/fingerprint scanner too but not sure how to do that in safe mode as it wasnt letting me before.

 

Whoever told you that should not be a computer tech.

 

I'm reviewing the thread...

[Seth]

Do the following in Safe Mode With Networking. That instruction is based on your statement that all is fine in Safe Mode. Correct?

 

Please download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.

• Doubleclick HJTInstall.exe to install HijackThis.
  
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
  
• Click on Install.
  
• It will create a HijackThis icon on the desktop.
  
• Once installed, it will launch Hijackthis.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log by copying and pasting in your next reply.
  

Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.

Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.

[cwaddell27]

Tried restarting in safe mode and now it doesnt seem to be going into it. I pressed f8 - start in safe mode... Then it goes to black screen with white writing which it did before but doesn't seem to be starting up.

 

All lines start with:

multi(0)disk(0)rdisk(0)partition(2)\WINDOWS\system32\DRIVERS\

then the ends are:

 

ohcil394.sys

1394BUS.SYS

compbatt.sys

BATTC.SYS

pciide.sys

PCIIDEX.SYS

pcmcia.sys

MountMgr.sys

ftdisk.sys

ACPIEC.sys

OPRGHDLR.SYS

PartMgr.sys

UBHelper.sys

VolSnap.sys

atapi.sys

disk.sys

CLASSPNP.SYS

fltmanager.sys

sr.sys

PXHelp20.sys

Fastfat.sys

KSecDD.sys

NDIS.sys

Mup.sys

 

this is the second time trying to start it in safe mode again. Only thing I changed earlier was taking password off but it only showed welcome on the screen. managed to get into safe mode again after that but now its not working

[cwaddell27]

ok now finally started in safe mode after about 15 mins on that screen

[cwaddell27]

Do the following in Safe Mode With Networking. That instruction is based on your statement that all is fine in Safe Mode. Correct?

 

 

Please download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.

• Doubleclick HJTInstall.exe to install HijackThis.
  
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
  
• Click on Install.
  
• It will create a HijackThis icon on the desktop.
  
• Once installed, it will launch Hijackthis.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log by copying and pasting in your next reply.
  

Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.

Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.

 

 

Got safe mode working but cant find the networking and in network connections it's blank. Also cant get internet connection to work and flash drive didnt work in usb ports - tried in different ones. So cant get the Hijack This folder onto my laptop.

[Guest Wolfeymole]

Have a read of this here Chris.

 

Recovering from a mup.sys boot hang on windows 2000 or XP. What is mup.sys anyway!

[cwaddell27]

Ok got Hijack This working.

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:55:29, on 10/09/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Boot mode: Safe mode

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\DigitalPersona\Bin\DPWinLct.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://portal.uwe.ac.uk/proxy.pac

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [LaunchApp] Alaunch

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe

O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot

O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE

O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe

O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect

O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation

O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"

O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Verball] "C:\Program Files\Verball\VerballSkypeApp.exe"

O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe

O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe

O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BLUEWIN\QUICKH~1\SMARTB~1\QuickHelpAlert.exe

O4 - HKLM\..\Run: [bLUEWIN_McciTrayApp] C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

O4 - HKLM\..\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe

O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [bitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Bluetooth.lnk = ?

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Send to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab

O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe

O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe

O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe

O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

--

End of file - 14456 bytes

[Guest Wolfeymole]

IMPORTANT We notice there are signs of one or more P2P (Person to Person) File Sharing Programs on your computer.

 

Please note that as long as you are using any form of Peer-to-Peer networking and downloading files from non-documented sources there is a high probability that you will be infested with malware.

 

Once upon a time, P2P file sharing was fairly safe. That is no longer true. You may continue to use P2P sharing at your own risk; however, please keep in mind that this practice may be the source of your current malware infestation.

 

References for the risk of these programs can be found in these links:

Malware: Help prevent the Infection

IM And P2P Malware Threats Nearly Triple - Technology News by TechWeb

How to Prevent Online Invation of Spyware, Adware and Malware

 

We would recommend that you uninstall these P2P programs, however that choice is up to you. If you choose to remove these programs, you can do so in the Control Panel via Add/Remove Programs. If you have Vista it's Programs and Features.

 

However in order for us to provide future assistance on this matter you must remove the P2P first as it would be fruitless to continue unless the possible cause is ruled out first and to prevent future infestations.

[Seth]

The log shows quite a number of problems.

 

Are you willing to take the time to pursue this?

[cwaddell27]

Yes - dont mind if it takes a while - i knew there were a few problems because sometimes sound would go off for no reason and had to restart. Also when I first got it there was some problem maybe with one of HD's and it gave off a loud high pitched noise but deleting files and system restore fixed it. Also recently screen would go dark every 15 mins if mouse wasnt moved as if it was on power saving when unplugged but was plugged it.

[cwaddell27]

But dont mind if all problems dont get fixed - mainly just want to get the startup and password stuff sorted out so then I can at least use my laptop. Some of the other things were annoying but weren't a huge problem so if anyone can help with the startup it would be a big help.

[Seth]

Given your last post which further confirms my suspicion, I believe that trying to to "repair" the issues will be a tedious and probable unsuccessful endevour.

 

I suggest backing up your personal data from safe mode, and then restoring the computer back to factory condition. I'll have to check if the model of your pc has a "recovery partition", but in the mean time, do you have recovery cd's? If not, Acer typically has an internal program in which you can make them.

[cwaddell27]

It didnt come with any cds but it told me to make backup cds i think. Do you know if its possible to use an external hard drive and plug it in during safe mode to save all my other files or wont it work in safe mode - because it'll be much easier and faster than having to use dvds.

 

I'd prefer if i didn't have to restore back to factory condition just in case it did mess it up more and I have also lost some of the discs of software I had so would be hard to replace a lot of stuff on it,but will do that only if I really have to.

 

If its possible I'd rather try to repair it or at least the start up. I want to try and get it checked or repaired at a computer place when I get back home to see if they can do anything .

[Seth]

Yes, you can hook up an external drive in safe mode to save your files. You should also make those recovery cd's/dvd's from safe mode.

 

Following that, my suggestion is to clean install XP given the symptoms.

 

Comments from other techs?