At Bootup Computer Pauses
in [Windows XP]
|
From: MichaelY on 10 Dec 2007 20:11 At bootup the computer pauses showing only the desktop background for about 2-3 minutes. I bring up the Windows Task Manager and it shows: Computer usage 0. There are no I/O Reads or Writes. Then it suddenly begins to process again and the desktop icons and the Start Bar comes up. I sure would appreciate getting a fix for this problem from some one more knowledgable than am I. Below is what I have done so far giving more information on the problem. Thanks for your consideration. Checking the System Event Log shows an error as the last event processed. The event properties shows: Source: DCOM Category: None Event ID: 10005 DCOM got an error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " Attempying to start the service MDM with arguments ' " ' in order to run the server {0C0A3666-30C9-11D0-8F20-00805F2CD064} ------------------------------------------------------------------------------------------------------------------------------ Clicking on the link to the Support Center yields the following information: Category: None Company Name: Microsoft Corporation Event ID: 1005 File Name: netevent.dll File Version: 5.1.2600.0 Product Name: Windows Operating System Product Version: 5.1.2600.0 Source: DCOM Type: Error. --------------------------------------------------------------------------------------------------------------------------- After I send the info, the Help and Support screen shows the following: Product: Windows Operating System ID: 10005 Source: DCOM Version: 5.0 Component: System Event Log Symbolic Name: EVENT_RPCSS_START_SERVICE_FAILURE Message: DCOM got error "%%%1" attempting to start the service %2 with arguments "%3" in order to run the server: %4 Explanation The Component Object Model (COM) infrastructure could not start the named Windows NT service. User Action Review the Windows error code displayed in the message. If the error indicates that the system is out of memory, save your work, close other programs, and then try to start the service again. Alternatively, increase the amount of RAM installed on the computer. If the message displays a system, server, or configuration error, contact your service support vendor. To determine the service ------------------------------------------------------------------------------------------------------------------ In response to Command Console command: sc query DCOM [SC] EnumQueryServicesStatus:OpenService FAILED 1060: The specified service does not exist as an installed service. ------------------------------------------------------------------------------------------------------------------ Following the instructions as shown in the Help and Support screen as shown above, I did not find an entry for DCOM in the Registry at: HKLM \SYSTEM\CurrentControlSet\Services. The closest thing there was DcomLaunch. It had as its ImagePath: %SystemRoot%\system32\svchost -k DcomLaunch and DcomLaunch\Parameters\ServiceDll Value=%SystemRoot% \system32\rpcss.dll --------------------------------------------------------------------------------------------------------------------------- Program Properties for rpcss.dll were: rpcss.dll Version 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) Microsoft Corporation ---------------------------------------------------------------------------------------------------------------------------- Checking my Services I do not have DCOM. The closest I have is DCOM Service Process Launcher which is running and set as Automatic
From: Gerry on 11 Dec 2007 04:24 Michael http://eventid.net/display.asp?eventid=10005&eventno=612&source=DCOM&phase=1 -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ MichaelY wrote: > At bootup the computer pauses showing only the desktop background for > about 2-3 minutes. I bring up the Windows Task Manager and it shows: > Computer usage 0. There are no I/O Reads or Writes. Then it suddenly > begins to process again and the desktop icons and the Start Bar comes > up. > > I sure would appreciate getting a fix for this problem from some one > more knowledgable than am I. Below is what I have done so far giving > more information on the problem. Thanks for your consideration. > > Checking the System Event Log shows an error as the last event > processed. The event properties shows: > Source: DCOM Category: None Event ID: 10005 > DCOM got an error "The service cannot be started, either because it is > disabled or because it has no enabled devices associated with it. " > Attempying to start the service MDM with arguments ' " ' in order to > run the server > {0C0A3666-30C9-11D0-8F20-00805F2CD064} > > ------------------------------------------------------------------------------------------------------------------------------ > Clicking on the link to the Support Center yields the following > information: > Category: None Company Name: Microsoft Corporation Event ID: > 1005 > File Name: netevent.dll File Version: 5.1.2600.0 Product Name: > Windows Operating System > Product Version: 5.1.2600.0 Source: DCOM Type: Error. > > --------------------------------------------------------------------------------------------------------------------------- > After I send the info, the Help and Support screen shows the > following: > Product: Windows Operating System ID: 10005 Source: DCOM Version: 5.0 > Component: System Event Log Symbolic Name: > EVENT_RPCSS_START_SERVICE_FAILURE Message: DCOM got error "%%%1" > attempting to start the service %2 with arguments "%3" in order to run > the server: > %4 Explanation > The Component Object Model (COM) infrastructure could not start the > named Windows NT service. > User Action > Review the Windows error code displayed in the message. If the error > indicates that the system is out of memory, save your work, close > other programs, and then try to start the service again. > Alternatively, increase the amount of RAM installed on the computer. > If the message displays a system, server, or configuration error, > contact your service support vendor. > To determine the service > > ------------------------------------------------------------------------------------------------------------------ > In response to Command Console command: sc query DCOM > [SC] EnumQueryServicesStatus:OpenService FAILED 1060: > > The specified service does not exist as an installed service. > > ------------------------------------------------------------------------------------------------------------------ > Following the instructions as shown in the Help and Support screen as > shown above, I did not find an entry for DCOM in the Registry at: HKLM > \SYSTEM\CurrentControlSet\Services. The closest thing there was > DcomLaunch. It had as its ImagePath: > %SystemRoot%\system32\svchost -k DcomLaunch > > and DcomLaunch\Parameters\ServiceDll Value=%SystemRoot% > \system32\rpcss.dll > > --------------------------------------------------------------------------------------------------------------------------- > Program Properties for rpcss.dll were: > rpcss.dll Version 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) Microsoft > Corporation > > ---------------------------------------------------------------------------------------------------------------------------- > Checking my Services I do not have DCOM. The closest I have is DCOM > Service Process Launcher which is running and set as Automatic
From: MichaelY on 14 Dec 2007 11:05 Thanks Gerry. You gave me a lead that was very helpful in solving this event error and others that I have had. That's the good news. The bad news is that my boot up delay still exists. It is as if the computer is waiting for some request to be filled. I have examined the delay more carefully. First I have disabled all startup programs, including ZoneAlarm firewall and antivirus. Next I disabled all but the necessary services. I disconnected all external devices save the monitor and the USB keyboard and mouse. Also I have run a complete virus check and spyware check (adaware and SpyBot). When the WELCOME screen comes up, if I click the User Name within 4 seconds, then the "loading personal preferences" message appears and following that the desktop background appears. That is when the computer pauses. However if I wait longer than the 4 seconds and click the User Name, the computer is already in the pause state and does not react until the pause is finished. Then the desktop comes up and the Start bar and Icons start filling in immediately. When the pause occurs during the display of the desktop background I can monitor the computer in the Task Manager. For the most part there are no I/Os and there is 0% computer usage. Occasionally there is a blip and one of the following tasks show some I/O activity and some minimal computer usage: Winlogon, explorer, Vsmon (part of Zone Alarm when it has not been disabled), lsass, svchost. The delay lasts 1 1/2 minutes and the amount of activity noted above is minimal, maybe 5 seconds overall. Then there is a sudden burst of activity, most notably Winlogon and the Start Bar and Desktop come up. System: Compaq 6000, 256MB memory, Windows XP Home, Motherboard FIC AM35, Cpmputer Chip:AMD Athalon XP 2000+ 1666MHz (Palomino), Chipset Properties Motherboard Chipset VIA VT8375 ProSavageDDR KM266 I Integrated Graphics Controller Graphics Controller Type S3 ProSavageDDR Graphics Controller Status Enabled Graphics Frame Buffer Size 32 MB AGP is disabled. This may cause performance penalty. Looking forward to a reply with thanks, MichaelY On Dec 11, 4:24 am, "Gerry" <ge...(a)nospam.com> wrote: > Michael > > http://eventid.net/display.asp?eventid=10005&eventno=612&source=DCOM&... > > -- > > Hope this helps. > > Gerry > ~~~~ > FCA > Stourport, England > Enquire, plan and execute > ~~~~~~~~~~~~~~~~~~~ > > MichaelY wrote: > > At bootup thecomputerpausesshowing only the desktop background for > > about 2-3 minutes. I bring up the Windows Task Manager and it shows: > >Computerusage 0. There are no I/O Reads or Writes. Then it suddenly > > begins to process again and the desktop icons and the Start Bar comes > > up. > > > I sure would appreciate getting a fix for this problem from some one > > more knowledgable than am I. Below is what I have done so far giving > > more information on the problem. Thanks for your consideration. > > > Checking the System Event Log shows an error as the last event > > processed. The event properties shows: > > Source: DCOM Category: None Event ID: 10005 > > DCOM got an error "The service cannot be started, either because it is > > disabled or because it has no enabled devices associated with it. " > > Attempying to start the service MDM with arguments ' " ' in order to > > run the server > > {0C0A3666-30C9-11D0-8F20-00805F2CD064} > > > ------------------------------------------------------------------------------------------------------------------------------ > > Clicking on the link to the Support Center yields the following > > information: > > Category: None Company Name: Microsoft Corporation Event ID: > > 1005 > > File Name: netevent.dll File Version: 5.1.2600.0 Product Name: > > Windows Operating System > > Product Version: 5.1.2600.0 Source: DCOM Type: Error. > > > --------------------------------------------------------------------------------------------------------------------------- > > After I send the info, the Help and Support screen shows the > > following: > > Product: Windows Operating System ID: 10005 Source: DCOM Version: 5.0 > > Component: System Event Log Symbolic Name: > > EVENT_RPCSS_START_SERVICE_FAILURE Message: DCOM got error "%%%1" > > attempting to start the service %2 with arguments "%3" in order to run > > the server: > > %4 Explanation > > The Component Object Model (COM) infrastructure could not start the > > named Windows NT service. > > User Action > > Review the Windows error code displayed in the message. If the error > > indicates that the system is out of memory, save your work, close > > other programs, and then try to start the service again. > > Alternatively, increase the amount of RAM installed on thecomputer. > > If the message displays a system, server, or configuration error, > > contact your service support vendor. > > To determine the service > > > ------------------------------------------------------------------------------------------------------------------ > > In response to Command Console command: sc query DCOM > > [SC] EnumQueryServicesStatus:OpenService FAILED 1060: > > > The specified service does not exist as an installed service. > > > ------------------------------------------------------------------------------------------------------------------ > > Following the instructions as shown in the Help and Support screen as > > shown above, I did not find an entry for DCOM in the Registry at: HKLM > > \SYSTEM\CurrentControlSet\Services. The closest thing there was > > DcomLaunch. It had as its ImagePath: > > %SystemRoot%\system32\svchost -k DcomLaunch > > > and DcomLaunch\Parameters\ServiceDll Value=%SystemRoot% > > \system32\rpcss.dll > > > --------------------------------------------------------------------------------------------------------------------------- > > Program Properties for rpcss.dll were: > > rpcss.dll Version 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) Microsoft > > Corporation > > > ---------------------------------------------------------------------------------------------------------------------------- > > Checking my Services I do not have DCOM. The closest I have is DCOM > > Service Process Launcher which is running and set as Automatic
From: Gerry on 14 Dec 2007 11:48 Michael You will have more than one ntuser.dat file i.e one for each user including the Default and the Administrator. How large is the one for the User Profile you are using to access your computer? Open Disk Defragmenter and click on Analyse. Select View Report and click on Save As and Save. Now find VolumeC.txt in your My Documents Folder and post a copy. Do this before running Disk Defragmenter as it is more informative. Select Start, All Programs, Accessories, System Tools, Disk CleanUp to Empty your Recycle Bin and Remove Temporary Internet Files. Also select Start, All Programs, accessories, System Tools, Disk CleanUp, More Options, System Restore and remove all but the latest System Restore point. Run Disk Defragmenter. Try Ctrl+Alt+Delete to select Task Manager and click the Performance Tab. Under Commit Charge what is the Total, the Limit and the Peak? You should be able to gather more information from Task Manager. With the Processes tab open select View, Select, Columns and check the boxes before Peak Memory Usage and Virtual Memory size. What are the figures for the 4 processes using the largest amounts? What are your anti-virus and anti-spyware arrangements? Have you tried this approach? How to configure Windows XP to start in a "clean boot" state http://support.microsoft.com/kb/310353/en-us Also look for Error Reports in the System log in Event Viewer. Please post copies of all Error and Warning Reports appearing in the System and Application logs in Event Viewer for the last boot. No Information Reports or Duplicates please. Indicate which also appear in a previous boot. You can access Event Viewer by selecting Start, Control Panel, Administrative Tools, and Event Viewer. When researching the meaning of the error, information regarding Event ID, Source and Description are important. HOW TO: View and Manage Event Logs in Event Viewer in Windows XP http://support.microsoft.com/kb/308427/en-us Part of the Description of the error will include a link, which you should double click for further information. You can copy using copy and paste. Often the link will, however, say there is no further information. http://go.microsoft.com/fw.link/events.asp (Please note the hyperlink above is for illustration purposes only) A tip for posting copies of Error Reports! Run Event Viewer and double click on the error you want to copy. In the window, which appears is a button resembling two pages. Click the button and close Event Viewer.Now start your message (email) and do a paste into the body of the message. Make sure this is the first paste after exiting from Event Viewer. Are there any yellow question marks in Device Manager? Right click on the My Computer icon on your Desktop and select Properties, Hardware,Device Manager. If yes what is the Device Error code? -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ MichaelY wrote: > Thanks Gerry. You gave me a lead that was very helpful in solving this > event error and others that I have had. That's the good news. > > The bad news is that my boot up delay still exists. It is as if the > computer is waiting for some request to be filled. > > I have examined the delay more carefully. First I have disabled all > startup programs, including ZoneAlarm firewall and antivirus. Next I > disabled all but the necessary services. I disconnected all external > devices save the monitor and the USB keyboard and mouse. Also I have > run a complete virus check and spyware check (adaware and SpyBot). > > When the WELCOME screen comes up, if I click the User Name within 4 > seconds, then the "loading personal preferences" message appears and > following that the desktop background appears. That is when the > computer pauses. However if I wait longer than the 4 seconds and click > the User Name, the computer is already in the pause state and does not > react until the pause is finished. Then the desktop comes up and the > Start bar and Icons start filling in immediately. > > When the pause occurs during the display of the desktop background I > can monitor the computer in the Task Manager. For the most part there > are no I/Os and there is 0% computer usage. Occasionally there is a > blip and one of the following tasks show some I/O activity and some > minimal computer usage: Winlogon, explorer, Vsmon (part of Zone Alarm > when it has not been disabled), lsass, svchost. The delay lasts 1 1/2 > minutes and the amount of activity noted above is minimal, maybe 5 > seconds overall. Then there is a sudden burst of activity, most > notably Winlogon and the Start Bar and Desktop come up. > > System: Compaq 6000, 256MB memory, Windows XP Home, Motherboard FIC > AM35, Cpmputer Chip:AMD Athalon XP 2000+ 1666MHz (Palomino), Chipset > Properties > Motherboard Chipset VIA VT8375 ProSavageDDR KM266 > I > Integrated Graphics Controller > Graphics Controller Type S3 ProSavageDDR > Graphics Controller Status Enabled > Graphics Frame Buffer Size 32 MB > AGP is disabled. This may cause performance penalty. > > Looking forward to a reply with thanks, > MichaelY > > > On Dec 11, 4:24 am, "Gerry" <ge...(a)nospam.com> wrote: >> Michael >> >> http://eventid.net/display.asp?eventid=10005&eventno=612&source=DCOM&... >> >> -- >> >> Hope this helps. >> >> Gerry >> ~~~~ >> FCA >> Stourport, England >> Enquire, plan and execute >> ~~~~~~~~~~~~~~~~~~~ >> >> MichaelY wrote: >>> At bootup thecomputerpausesshowing only the desktop background for >>> about 2-3 minutes. I bring up the Windows Task Manager and it shows: >>> Computerusage 0. There are no I/O Reads or Writes. Then it suddenly >>> begins to process again and the desktop icons and the Start Bar >>> comes up. >> >>> I sure would appreciate getting a fix for this problem from some one >>> more knowledgable than am I. Below is what I have done so far giving >>> more information on the problem. Thanks for your consideration. >> >>> Checking the System Event Log shows an error as the last event >>> processed. The event properties shows: >>> Source: DCOM Category: None Event ID: 10005 >>> DCOM got an error "The service cannot be started, either because it >>> is disabled or because it has no enabled devices associated with >>> it. " Attempying to start the service MDM with arguments ' " ' in >>> order to run the server >>> {0C0A3666-30C9-11D0-8F20-00805F2CD064} >> >>> ------------------------------------------------------------------------------------------------------------------------------ >>> Clicking on the link to the Support Center yields the following >>> information: >>> Category: None Company Name: Microsoft Corporation Event ID: >>> 1005 >>> File Name: netevent.dll File Version: 5.1.2600.0 Product Name: >>> Windows Operating System >>> Product Version: 5.1.2600.0 Source: DCOM Type: Error. >> >>> --------------------------------------------------------------------------------------------------------------------------- >>> After I send the info, the Help and Support screen shows the >>> following: >>> Product: Windows Operating System ID: 10005 Source: DCOM Version: >>> 5.0 Component: System Event Log Symbolic Name: >>> EVENT_RPCSS_START_SERVICE_FAILURE Message: DCOM got error "%%%1" >>> attempting to start the service %2 with arguments "%3" in order to >>> run the server: >>> %4 Explanation >>> The Component Object Model (COM) infrastructure could not start the >>> named Windows NT service. >>> User Action >>> Review the Windows error code displayed in the message. If the error >>> indicates that the system is out of memory, save your work, close >>> other programs, and then try to start the service again. >>> Alternatively, increase the amount of RAM installed on thecomputer. >>> If the message displays a system, server, or configuration error, >>> contact your service support vendor. >>> To determine the service >> >>> ------------------------------------------------------------------------------------------------------------------ >>> In response to Command Console command: sc query DCOM >>> [SC] EnumQueryServicesStatus:OpenService FAILED 1060: >> >>> The specified service does not exist as an installed service. >> >>> ------------------------------------------------------------------------------------------------------------------ >>> Following the instructions as shown in the Help and Support screen >>> as shown above, I did not find an entry for DCOM in the Registry >>> at: HKLM \SYSTEM\CurrentControlSet\Services. The closest thing >>> there was DcomLaunch. It had as its ImagePath: >>> %SystemRoot%\system32\svchost -k DcomLaunch >> >>> and DcomLaunch\Parameters\ServiceDll Value=%SystemRoot% >>> \system32\rpcss.dll >> >>> --------------------------------------------------------------------------------------------------------------------------- >>> Program Properties for rpcss.dll were: >>> rpcss.dll Version 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) Microsoft >>> Corporation >> >>> ---------------------------------------------------------------------------------------------------------------------------- >>> Checking my Services I do not have DCOM. The closest I have is DCOM >>> Service Process Launcher which is running and set as Automatic
From: MichaelY on 16 Dec 2007 16:52 Gerry, Unfortunately I had already done a defragment before I got your last reply. Nevertheless I am reporting the info you requested and then did another defragment. So here goes with the info you requested: Current NTUSER.DAT file size: 3,328KB. The other 2 NTUSER.DAT files are 256KB each. VOLUMEC.TXT File before Defrag: Volume hard drive (C:) Volume size = 57.26 GB Cluster size = 4 KB Used space = 15.23 GB Free space = 42.03 GB Percent free space = 73 % Volume fragmentation Total fragmentation = 1 % File fragmentation = 2 % Free space fragmentation = 0 % File fragmentation Total files = 64,315 Average file size = 401 KB Total fragmented files = 512 Total excess fragments = 7,982 Average fragments per file = 1.12 Pagefile fragmentation Pagefile size = 336 MB Total fragments = 1 Folder fragmentation Total folders = 6,215 Fragmented folders = 5 Excess folder fragments = 15 Master File Table (MFT) fragmentation Total MFT size = 70 MB MFT record count = 70,926 Percent MFT in use = 99 % Total MFT fragments = 3 -------------------------------------------------------------------------------- Fragments File Size Most fragmented files 278 17 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP266\A0098859.exe 91 6 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP266\A0098842.dll 91 6 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP266\A0098868.dll 55 3 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP266\A0098833.dll 55 3 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP266\A0098864.dll 42 3 MB \Documents and Settings\cjjanus\Local Settings\Application Data\Mozilla\Firefox\Profiles\jh2rz5tn.default \Cache\_CACHE_003_ 37 1 MB \Documents and Settings\cjjanus\Local Settings\Application Data\Mozilla\Firefox\Profiles\jh2rz5tn.default \Cache\_CACHE_002_ 37 973 KB \Documents and Settings\cjjanus\Local Settings\Application Data\Mozilla\Firefox\Profiles\jh2rz5tn.default \Cache\_CACHE_001_ 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098973.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098956.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP268\A0098952.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098955.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098991.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098962.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098965.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0099008.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098985.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098981.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098974.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098999.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0099001.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098986.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098998.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098961.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098982.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0099002.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098968.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0099007.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098994.RDB 33 2 MB \System Volume Information \_restore{37FC7D56-C600-45B5-9C5B-C3343FC87767}\RP269\A0098953.RDB DID A DISK CLEAN AND REMOVED ALL BUT LAST RESTORE POINT DID A SECOND DEFRAG VOLUMEC.TXT After Defrag: Volume hard drive (C:) Volume size = 57.26 GB Cluster size = 4 KB Used space = 12.09 GB Free space = 45.17 GB Percent free space = 78 % Volume fragmentation Total fragmentation = 0 % File fragmentation = 0 % Free space fragmentation = 0 % File fragmentation Total files = 56,875 Average file size = 273 KB Total fragmented files = 0 Total excess fragments = 5 Average fragments per file = 1.00 Pagefile fragmentation Pagefile size = 336 MB Total fragments = 1 Folder fragmentation Total folders = 5,978 Fragmented folders = 1 Excess folder fragments = 0 Master File Table (MFT) fragmentation Total MFT size = 70 MB MFT record count = 62,990 Percent MFT in use = 88 % Total MFT fragments = 3 -------------------------------------------------------------------------------- Fragments File Size Files that cannot be defragmented None TASK MANAGER DATA: Commit Total: 239216KB Commit Limit: 559876KB Commit Peak: 300948KB SERVICES WITH LARGEST PEAK/VMSIZE: ScanningProcess.exe: Peak: 47532KB VMSize: 30216KB FireFox.exe: Peak: 44512KB VMSize: 31264KB Explorer.exe: Peak: 35848KB VMSize: 21592KB Svchost.exe: Peak: 29024KB VMSize: 26248KB Vsmon.exe: Peak: 24224KB VMSize: 20544KB ANTI-VIRUS: ZoneAlarm Anti Virus SPYWARE: AdAware & Spybot run weekly. Tried a "Clean Boot" and the problem persists. EVENT VIEWER - Event only showed when running "Clean Boot " Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7006 Date: 12/16/2007 Time: 3:41:55 PM User: N/A Computer: CJJANUS-5A41B28 Description: The ScRegSetValueExW call failed for Start with the following error: Access is denied. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. AND FINALLY: The Device Manager shows no errors or warnings. I hope that this gives you what you need and that you can decipher a cure for the problem. I certainly appreciate your efforts. Sincerely, MichaelY On Dec 14, 11:48 am, "Gerry" <ge...(a)nospam.com> wrote: > Michael > > You will have more than one ntuser.dat file i.e one for each user > including the Default and the Administrator. How large is the one for > the User Profile you are using to access your computer? > > Open Disk Defragmenter and click on Analyse. Select View Report and > click on Save As and Save. Now find VolumeC.txt in your My Documents > Folder and post a copy. Do this before running Disk Defragmenter as it > is more informative. > > Select Start, All Programs, Accessories, System Tools, Disk CleanUp to > Empty your Recycle Bin and Remove Temporary Internet Files. Also > select Start, All Programs, accessories, System Tools, Disk CleanUp, > More Options, System Restore and remove all but the latest System > Restore point. Run Disk Defragmenter. > > Try Ctrl+Alt+Delete to select Task Manager and click the Performance > Tab. Under Commit Charge what is the Total, the Limit and the Peak? > > You should be able to gather more information from Task Manager. With > the Processes tab open select View, Select, Columns and check the boxes > before Peak Memory Usage and Virtual Memory size. What are the figures > for the 4 processes using the largest amounts? > > What are your anti-virus and anti-spyware arrangements? > > Have you tried this approach? > How to configure Windows XP to start in a "clean boot" statehttp://support.microsoft.com/kb/310353/en-us > > Also look for Error Reports in the System log in Event Viewer. > Please post copies of all Error and Warning Reports appearing in > the System and Application logs in Event Viewer for the last boot. No > Information Reports or Duplicates please. Indicate which also appear in > a previous boot. > > You can access Event Viewer by selecting Start, Control Panel, > Administrative Tools, and Event Viewer. When researching the meaning > of the error, information regarding Event ID, Source and Description > are important. > > HOW TO: View and Manage Event Logs in Event Viewer in Windows XPhttp://support.microsoft.com/kb/308427/en-us > > Part of the Description of the error will include a link, which you > should double click for further information. You can copy using copy > and paste. Often the link will, however, say there is no further > information.http://go.microsoft.com/fw.link/events.asp > (Please note the hyperlink above is for illustration purposes only) > > A tip for posting copies of Error Reports! Run Event Viewer and double > click on the error you want to copy. In the window, which appears is a > button resembling two pages. Click the button and close Event > Viewer.Now start your message (email) and do a paste into the body of > the message. Make sure this is the first paste after exiting from > Event Viewer. > > Are there any yellow question marks in Device Manager? Right click on > the My Computer icon on yourDesktopand select Properties, > Hardware,Device Manager. If yes what is the Device Error code? > > -- > > Hope this helps. > > Gerry > ~~~~ > FCA > Stourport, England > Enquire, plan and execute > ~~~~~~~~~~~~~~~~~~~ > > MichaelY wrote: > > Thanks Gerry. You gave me a lead that was very helpful in solving this > > event error and others that I have had. That's the good news. > > > The bad news is that my boot up delay still exists. It is as if the > > computer is waiting for some request to be filled. > > > I have examined the delay more carefully. First I have disabled all > > startup programs, including ZoneAlarm firewall and antivirus. Next I > > disabled all but the necessary services. I disconnected all external > > devices save the monitor and the USB keyboard and mouse. Also I have > > run a complete virus check and spyware check (adaware and SpyBot). > > > When the WELCOME screen comes up, if I click the User Name within 4 > > seconds, then the "loading personal preferences" message appears and > > following that thedesktopbackground appears. That is when the > > computerpauses. However if I wait longer than the 4 seconds and click > > the User Name, the computer is already in the pause state and does not > > react until the pause is finished. Then thedesktopcomes up and the > > Start bar and Icons start filling in immediately. > > > When the pause occurs during the display of thedesktopbackground I > > can monitor the computer in the Task Manager. For the most part there > > are no I/Os and there is 0% computer usage. Occasionally there is a > > blip and one of the following tasks show some I/O activity and some > > minimal computer usage: Winlogon, explorer, Vsmon (part of Zone Alarm > > when it has not been disabled), lsass, svchost. The delay lasts 1 1/2 > > minutes and the amount of activity noted above is minimal, maybe 5 > > seconds overall. Then there is a sudden burst of activity, most > > notably Winlogon and the Start Bar andDesktopcome up. > > > System: Compaq 6000, 256MB memory, Windows XP Home, Motherboard FIC > > AM35, Cpmputer Chip:AMD Athalon XP 2000+ 1666MHz (Palomino), Chipset > > Properties > > Motherboard Chipset VIA VT8375 ProSavageDDR KM266 > > I > > Integrated Graphics Controller > > Graphics Controller Type S3 ProSavageDDR > > Graphics Controller Status Enabled > > Graphics Frame Buffer Size 32 MB > > AGP is disabled. This may cause performance penalty. > > > Looking forward to a reply with thanks, > > MichaelY > > > On Dec 11, 4:24 am, "Gerry" <ge...(a)nospam.com> wrote: > >> Michael > > >>http://eventid.net/display.asp?eventid=10005&eventno=612&source=DCOM&... > > >> -- > > >> Hope this helps. > > >> Gerry > >> ~~~~ > >> FCA > >> Stourport, England > >> Enquire, plan and execute > >> ~~~~~~~~~~~~~~~~~~~ > > >> MichaelY wrote: > >>> At bootup thecomputerpausesshowing only thedesktopbackground for > >>> about 2-3 minutes. I bring up the Windows Task Manager and it shows: > >>> Computerusage 0. There are no I/O Reads or Writes. Then it suddenly > >>> begins to process again and thedesktopicons and the Start Bar > >>> comes up. > > >>> I sure would appreciate getting a fix for this problem from some one > >>> more knowledgable than am I. Below is what I have done so far giving > >>> more information on the problem. Thanks for your consideration. > > >>> Checking the System Event Log shows an error as the last event > >>> processed. The event properties shows: > >>> Source: DCOM Category: None Event ID: 10005 > >>> DCOM got an error "The service cannot be started, either because it > >>> is disabled or because it has no enabled devices associated with > >>> it. " Attempying to start the service MDM with arguments ' " ' in > >>> order to run the server > >>> {0C0A3666-30C9-11D0-8F20-00805F2CD064} > > >>> ------------------------------------------------------------------------------------------------------------------------------ > >>> Clicking on the link to the Support Center yields the following > >>> information: > >>> Category: None Company Name: Microsoft Corporation Event ID: > >>> 1005 > >>> File Name: netevent.dll File Version: 5.1.2600.0 Product Name: > >>> Windows Operating System > >>> Product Version: 5.1.2600.0 Source: DCOM Type: Error. > > >>> --------------------------------------------------------------------------------------------------------------------------- > >>> After I send the info, the Help and Support screen shows the > >>> following: > >>> Product: Windows Operating System ID: 10005 Source: DCOM Version: > >>> 5.0 Component: System Event Log Symbolic Name: > >>> EVENT_RPCSS_START_SERVICE_FAILURE Message: DCOM got error "%%%1" > >>> attempting to start the service %2 with arguments "%3" in order to > >>> run the server: > >>> %4 Explanation > >>> The Component Object Model (COM) infrastructure could not start the > >>> named Windows NT service. > >>> User Action > >>> Review the Windows error code displayed in the message. If the error > >>> indicates that the system is out of memory, save your work, close > >>> other programs, and then try to start the service again. > >>> Alternatively, increase the amount of RAM installed on thecomputer. > >>> If the message displays a system, server, or configuration error, > >>> contact your service support vendor. > >>> To determine the service > > >>> ------------------------------------------------------------------------------------------------------------------ > >>> In response to Command Console command: sc query DCOM > >>> [SC] EnumQueryServicesStatus:OpenService FAILED 1060: > > >>> The specified service does not exist as an installed service. > > >>> ------------------------------------------------------------------------------------------------------------------ > >>> Following the instructions as shown in the Help and Support screen > >>> as shown above, I did not find an entry for DCOM in the Registry > >>> at: HKLM \SYSTEM\CurrentControlSet\Services. The closest thing > >>> there was DcomLaunch. It had as its ImagePath: > >>> %SystemRoot%\system32\svchost -k DcomLaunch > > >>> and DcomLaunch\Parameters\ServiceDll Value=%SystemRoot% > >>> \system32\rpcss.dll > > >>> --------------------------------------------------------------------------------------------------------------------------- > >>> Program Properties for rpcss.dll were: > >>> rpcss.dll Version 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) Microsoft > >>> Corporation > > >>> ---------------------------------------------------------------------------------------------------------------------------- > >>> Checking my Services I do not have DCOM. The closest I have is DCOM > >>> Service Process Launcher which is running and set as Automatic
|
Next
|
Last
Pages: 1 2 Prev: RegRun Partizan Rootkit Killer Next: Serious BSOD problem - wdf01000.sys |