Missing boot-start driver bthex.dll
in [Windows XP Basics]
|
From: Richard on 24 Jun 2010 10:57 On 24/06/2010 15:09, John John - MVP wrote: > > John John - MVP wrote: >> Richard wrote: >>> On 24/06/2010 14:13, John John - MVP wrote: >>>> Richard wrote: >>>>> On 24/06/2010 13:20, John John - MVP wrote: >>>>>> Richard wrote: >>>>>>> (This may be repeated....if so, sorry!)When I start my computer >>>>>>> (with >>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and >>>>>>> before >>>>>>> Windows even kicks in, I get a white progress bar at the bottom >>>>>>> of the >>>>>>> screen that fills up over about 20 minutes before the usual Windows >>>>>>> logo/start screen appears. Looking at the event viewer for the >>>>>>> System >>>>>>> I find that "boot-start or system-start driver "bthex" was not >>>>>>> found. >>>>>>> Looking in the Registry indicates that bthex is expected to be found >>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly >>>>>>> deleted\renamed it or something. I have put my installation DVD >>>>>>> in the >>>>>>> drive and tried a repair but this driver cannot be located there, >>>>>>> and >>>>>>> I have googled for it but with no luck. Can anyone suggest where I >>>>>>> might find this system file, or maybe even search for it on their >>>>>>> own >>>>>>> Syste32 folder and make it available to me?? Many thanks for any >>>>>>> help >>>>>>> in advance. >>>>>> >>>>>> If it's a driver it would be a .sys file (not a .dll). A search >>>>>> for this >>>>>> file yields no results, often an indication that the file is virus or >>>>>> malware related. I would suggest that you make sure that the >>>>>> machine is >>>>>> free of any pests. >>>>>> >>>>>> Where *exactly* in the registry did you find reference to this >>>>>> file? It >>>>>> could be that your Anti-Virus tools have removed an infection and >>>>>> that >>>>>> the entry is just a remnant. >>>>>> >>>>>> John >>>>> Appears at HKLM/System/ControlSet001(and >>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which >>>>> I am not allowed to edit: also at ditto\controlset001 (and >>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath >>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these >>>>> references, could that help?? >>>> >>>> Is it in the CurrentControlSet? >>>> >>>> Look for phantom devices in the Device Manager and see if any make >>>> mention this BTHEX driver: >>>> >>>> Device Manager does not display devices that are not connected to the >>>> Windows XP-based computer >>>> http://support.microsoft.com/kb/315539 >>>> >>>> This little batch file will automatically set the Device Manager to >>>> show >>>> phantom devices and open it for you: >>>> >>>> ---------------------------------------------------- >>>> set devmgr_show_nonpresent_devices-1 >>>> start devmgmt.msc >>>> ---------------------------------------------------- >>>> >>>> You cannot delete the keys in the Enum section because you do not have >>>> permission to do so, grant yourself the necessary permissions and you >>>> will be able to remove the keys. Before you do that keep in mind that >>>> there is a good reason why only the System account has permission to >>>> delete keys in the in the \Enum branch! It would be best to remove the >>>> device in the Device Manager instead of removing it from the Enum keys. >>>> >>>> Before you change the permissions and delete keys please read the >>>> following: >>>> >>>> Enum >>>> http://technet.microsoft.com/en-ca/library/cc976176.aspx >>>> >>>> System and Startup Settings >>>> http://technet.microsoft.com/en-us/library/bb742541.aspx >>>> >>>> HKEY_LOCAL_MACHINE\SYSTEM\Select >>>> http://technet.microsoft.com/en-ca/library/cc978528.aspx >>>> >>>> John >>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. >>> No mention in Device Manager, or after running your batch file. I >>> won't try to meddle with Enum, but how do I grant myself permission >>> if I did want to?? I will read the articles you mention, but since >>> this is the file that is causing my 20 min startup delay, >>> ex-infection or otherwise - how do I get rid of my system searching >>> for it?? Thanks again. >> >> The registry permissions are just like regular NTFS file permissions, >> just right click on the offending key and select Permissions... >> >> If you are convinced that this is the culprit and if you cannot remove >> the device from the Device Manager then just grant yourself full >> control on the key and delete it. For the time being remove it in the >> CurrentControlSet only! If the Windows installation balks at its >> removal (when you reboot) just boot to the Last Known Good Configuration. > > PS. The problem is more likely to be caused by the status of the service > in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I > suggest that you remove or disable the service there. To disable the > service set its Start value to 4. > > John Well, Having deleted it from the CurrentControlSet and rebooted, the problem is still there, but Event Viewer no longer reports a problem in looking for bthex. So I presume bthex, whatever it is, is *not* the reason for my slow progress bar in booting up. Any ideas as to what it might now be? Could it be something to do with Power On Self Testing, or if not is there any way of diagnosing why this has suddenly started occuring? Cheers. Richard
From: John John - MVP on 24 Jun 2010 12:22 Richard wrote: > On 24/06/2010 15:09, John John - MVP wrote: >> >> John John - MVP wrote: >>> Richard wrote: >>>> On 24/06/2010 14:13, John John - MVP wrote: >>>>> Richard wrote: >>>>>> On 24/06/2010 13:20, John John - MVP wrote: >>>>>>> Richard wrote: >>>>>>>> (This may be repeated....if so, sorry!)When I start my computer >>>>>>>> (with >>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and >>>>>>>> before >>>>>>>> Windows even kicks in, I get a white progress bar at the bottom >>>>>>>> of the >>>>>>>> screen that fills up over about 20 minutes before the usual Windows >>>>>>>> logo/start screen appears. Looking at the event viewer for the >>>>>>>> System >>>>>>>> I find that "boot-start or system-start driver "bthex" was not >>>>>>>> found. >>>>>>>> Looking in the Registry indicates that bthex is expected to be >>>>>>>> found >>>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly >>>>>>>> deleted\renamed it or something. I have put my installation DVD >>>>>>>> in the >>>>>>>> drive and tried a repair but this driver cannot be located there, >>>>>>>> and >>>>>>>> I have googled for it but with no luck. Can anyone suggest where I >>>>>>>> might find this system file, or maybe even search for it on their >>>>>>>> own >>>>>>>> Syste32 folder and make it available to me?? Many thanks for any >>>>>>>> help >>>>>>>> in advance. >>>>>>> >>>>>>> If it's a driver it would be a .sys file (not a .dll). A search >>>>>>> for this >>>>>>> file yields no results, often an indication that the file is >>>>>>> virus or >>>>>>> malware related. I would suggest that you make sure that the >>>>>>> machine is >>>>>>> free of any pests. >>>>>>> >>>>>>> Where *exactly* in the registry did you find reference to this >>>>>>> file? It >>>>>>> could be that your Anti-Virus tools have removed an infection and >>>>>>> that >>>>>>> the entry is just a remnant. >>>>>>> >>>>>>> John >>>>>> Appears at HKLM/System/ControlSet001(and >>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which >>>>>> I am not allowed to edit: also at ditto\controlset001 (and >>>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath >>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these >>>>>> references, could that help?? >>>>> >>>>> Is it in the CurrentControlSet? >>>>> >>>>> Look for phantom devices in the Device Manager and see if any make >>>>> mention this BTHEX driver: >>>>> >>>>> Device Manager does not display devices that are not connected to the >>>>> Windows XP-based computer >>>>> http://support.microsoft.com/kb/315539 >>>>> >>>>> This little batch file will automatically set the Device Manager to >>>>> show >>>>> phantom devices and open it for you: >>>>> >>>>> ---------------------------------------------------- >>>>> set devmgr_show_nonpresent_devices-1 >>>>> start devmgmt.msc >>>>> ---------------------------------------------------- >>>>> >>>>> You cannot delete the keys in the Enum section because you do not have >>>>> permission to do so, grant yourself the necessary permissions and you >>>>> will be able to remove the keys. Before you do that keep in mind that >>>>> there is a good reason why only the System account has permission to >>>>> delete keys in the in the \Enum branch! It would be best to remove the >>>>> device in the Device Manager instead of removing it from the Enum >>>>> keys. >>>>> >>>>> Before you change the permissions and delete keys please read the >>>>> following: >>>>> >>>>> Enum >>>>> http://technet.microsoft.com/en-ca/library/cc976176.aspx >>>>> >>>>> System and Startup Settings >>>>> http://technet.microsoft.com/en-us/library/bb742541.aspx >>>>> >>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select >>>>> http://technet.microsoft.com/en-ca/library/cc978528.aspx >>>>> >>>>> John >>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. >>>> No mention in Device Manager, or after running your batch file. I >>>> won't try to meddle with Enum, but how do I grant myself permission >>>> if I did want to?? I will read the articles you mention, but since >>>> this is the file that is causing my 20 min startup delay, >>>> ex-infection or otherwise - how do I get rid of my system searching >>>> for it?? Thanks again. >>> >>> The registry permissions are just like regular NTFS file permissions, >>> just right click on the offending key and select Permissions... >>> >>> If you are convinced that this is the culprit and if you cannot remove >>> the device from the Device Manager then just grant yourself full >>> control on the key and delete it. For the time being remove it in the >>> CurrentControlSet only! If the Windows installation balks at its >>> removal (when you reboot) just boot to the Last Known Good >>> Configuration. >> >> PS. The problem is more likely to be caused by the status of the service >> in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I >> suggest that you remove or disable the service there. To disable the >> service set its Start value to 4. >> >> John > Well, Having deleted it from the CurrentControlSet and rebooted, the > problem is still there, but Event Viewer no longer reports a problem in > looking for bthex. So I presume bthex, whatever it is, is *not* the > reason for my slow progress bar in booting up. Any ideas as to what it > might now be? Could it be something to do with Power On Self Testing, or > if not is there any way of diagnosing why this has suddenly started > occuring? Cheers. I think that what you are seeing is part of the Windows boot process rather than the POST routine, an easy way to tell would be to press/tap the F8 key when the computer is booting and see how long it takes for the advanced Windows boot options show up. Or put a second (phony) line in the boot.ini file and see how long it takes for ntldr to parse and present the boot menu. John
From: John John - MVP on 24 Jun 2010 12:35 John John - MVP wrote: > Richard wrote: >> On 24/06/2010 15:09, John John - MVP wrote: >>> >>> John John - MVP wrote: >>>> Richard wrote: >>>>> On 24/06/2010 14:13, John John - MVP wrote: >>>>>> Richard wrote: >>>>>>> On 24/06/2010 13:20, John John - MVP wrote: >>>>>>>> Richard wrote: >>>>>>>>> (This may be repeated....if so, sorry!)When I start my computer >>>>>>>>> (with >>>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and >>>>>>>>> before >>>>>>>>> Windows even kicks in, I get a white progress bar at the bottom >>>>>>>>> of the >>>>>>>>> screen that fills up over about 20 minutes before the usual >>>>>>>>> Windows >>>>>>>>> logo/start screen appears. Looking at the event viewer for the >>>>>>>>> System >>>>>>>>> I find that "boot-start or system-start driver "bthex" was not >>>>>>>>> found. >>>>>>>>> Looking in the Registry indicates that bthex is expected to be >>>>>>>>> found >>>>>>>>> in Win\System32\Drivers. It is not there, so something has >>>>>>>>> suddenly >>>>>>>>> deleted\renamed it or something. I have put my installation DVD >>>>>>>>> in the >>>>>>>>> drive and tried a repair but this driver cannot be located there, >>>>>>>>> and >>>>>>>>> I have googled for it but with no luck. Can anyone suggest where I >>>>>>>>> might find this system file, or maybe even search for it on their >>>>>>>>> own >>>>>>>>> Syste32 folder and make it available to me?? Many thanks for any >>>>>>>>> help >>>>>>>>> in advance. >>>>>>>> >>>>>>>> If it's a driver it would be a .sys file (not a .dll). A search >>>>>>>> for this >>>>>>>> file yields no results, often an indication that the file is >>>>>>>> virus or >>>>>>>> malware related. I would suggest that you make sure that the >>>>>>>> machine is >>>>>>>> free of any pests. >>>>>>>> >>>>>>>> Where *exactly* in the registry did you find reference to this >>>>>>>> file? It >>>>>>>> could be that your Anti-Virus tools have removed an infection and >>>>>>>> that >>>>>>>> the entry is just a remnant. >>>>>>>> >>>>>>>> John >>>>>>> Appears at HKLM/System/ControlSet001(and >>>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") >>>>>>> which >>>>>>> I am not allowed to edit: also at ditto\controlset001 (and >>>>>>> 3)/services/bthex/ (and >>>>>>> services/enum/explorerbars/{C4EE31})ImagePath >>>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these >>>>>>> references, could that help?? >>>>>> >>>>>> Is it in the CurrentControlSet? >>>>>> >>>>>> Look for phantom devices in the Device Manager and see if any make >>>>>> mention this BTHEX driver: >>>>>> >>>>>> Device Manager does not display devices that are not connected to the >>>>>> Windows XP-based computer >>>>>> http://support.microsoft.com/kb/315539 >>>>>> >>>>>> This little batch file will automatically set the Device Manager to >>>>>> show >>>>>> phantom devices and open it for you: >>>>>> >>>>>> ---------------------------------------------------- >>>>>> set devmgr_show_nonpresent_devices-1 >>>>>> start devmgmt.msc >>>>>> ---------------------------------------------------- >>>>>> >>>>>> You cannot delete the keys in the Enum section because you do not >>>>>> have >>>>>> permission to do so, grant yourself the necessary permissions and you >>>>>> will be able to remove the keys. Before you do that keep in mind that >>>>>> there is a good reason why only the System account has permission to >>>>>> delete keys in the in the \Enum branch! It would be best to remove >>>>>> the >>>>>> device in the Device Manager instead of removing it from the Enum >>>>>> keys. >>>>>> >>>>>> Before you change the permissions and delete keys please read the >>>>>> following: >>>>>> >>>>>> Enum >>>>>> http://technet.microsoft.com/en-ca/library/cc976176.aspx >>>>>> >>>>>> System and Startup Settings >>>>>> http://technet.microsoft.com/en-us/library/bb742541.aspx >>>>>> >>>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select >>>>>> http://technet.microsoft.com/en-ca/library/cc978528.aspx >>>>>> >>>>>> John >>>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. >>>>> No mention in Device Manager, or after running your batch file. I >>>>> won't try to meddle with Enum, but how do I grant myself permission >>>>> if I did want to?? I will read the articles you mention, but since >>>>> this is the file that is causing my 20 min startup delay, >>>>> ex-infection or otherwise - how do I get rid of my system searching >>>>> for it?? Thanks again. >>>> >>>> The registry permissions are just like regular NTFS file permissions, >>>> just right click on the offending key and select Permissions... >>>> >>>> If you are convinced that this is the culprit and if you cannot remove >>>> the device from the Device Manager then just grant yourself full >>>> control on the key and delete it. For the time being remove it in the >>>> CurrentControlSet only! If the Windows installation balks at its >>>> removal (when you reboot) just boot to the Last Known Good >>>> Configuration. >>> >>> PS. The problem is more likely to be caused by the status of the service >>> in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I >>> suggest that you remove or disable the service there. To disable the >>> service set its Start value to 4. >>> >>> John >> Well, Having deleted it from the CurrentControlSet and rebooted, the >> problem is still there, but Event Viewer no longer reports a problem >> in looking for bthex. So I presume bthex, whatever it is, is *not* the >> reason for my slow progress bar in booting up. Any ideas as to what it >> might now be? Could it be something to do with Power On Self Testing, >> or if not is there any way of diagnosing why this has suddenly started >> occuring? Cheers. > > I think that what you are seeing is part of the Windows boot process > rather than the POST routine, an easy way to tell would be to press/tap > the F8 key when the computer is booting and see how long it takes for > the advanced Windows boot options show up. Or put a second (phony) line > in the boot.ini file and see how long it takes for ntldr to parse and > present the boot menu. What is the make and model of the computer? If you determine that the hang is happening before the Windows boot process you can look in the BIOS and see if you have a non present IDE device enabled. Some computers (older Dells, for example) will hang for a very long time after/during the POST routine if a hard drive enabled in the BIOS is not present. John
From: Richard on 24 Jun 2010 12:38 On 24/06/2010 17:22, John John - MVP wrote: > Richard wrote: >> On 24/06/2010 15:09, John John - MVP wrote: >>> >>> John John - MVP wrote: >>>> Richard wrote: >>>>> On 24/06/2010 14:13, John John - MVP wrote: >>>>>> Richard wrote: >>>>>>> On 24/06/2010 13:20, John John - MVP wrote: >>>>>>>> Richard wrote: >>>>>>>>> (This may be repeated....if so, sorry!)When I start my computer >>>>>>>>> (with >>>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and >>>>>>>>> before >>>>>>>>> Windows even kicks in, I get a white progress bar at the bottom >>>>>>>>> of the >>>>>>>>> screen that fills up over about 20 minutes before the usual >>>>>>>>> Windows >>>>>>>>> logo/start screen appears. Looking at the event viewer for the >>>>>>>>> System >>>>>>>>> I find that "boot-start or system-start driver "bthex" was not >>>>>>>>> found. >>>>>>>>> Looking in the Registry indicates that bthex is expected to be >>>>>>>>> found >>>>>>>>> in Win\System32\Drivers. It is not there, so something has >>>>>>>>> suddenly >>>>>>>>> deleted\renamed it or something. I have put my installation DVD >>>>>>>>> in the >>>>>>>>> drive and tried a repair but this driver cannot be located there, >>>>>>>>> and >>>>>>>>> I have googled for it but with no luck. Can anyone suggest where I >>>>>>>>> might find this system file, or maybe even search for it on their >>>>>>>>> own >>>>>>>>> Syste32 folder and make it available to me?? Many thanks for any >>>>>>>>> help >>>>>>>>> in advance. >>>>>>>> >>>>>>>> If it's a driver it would be a .sys file (not a .dll). A search >>>>>>>> for this >>>>>>>> file yields no results, often an indication that the file is >>>>>>>> virus or >>>>>>>> malware related. I would suggest that you make sure that the >>>>>>>> machine is >>>>>>>> free of any pests. >>>>>>>> >>>>>>>> Where *exactly* in the registry did you find reference to this >>>>>>>> file? It >>>>>>>> could be that your Anti-Virus tools have removed an infection and >>>>>>>> that >>>>>>>> the entry is just a remnant. >>>>>>>> >>>>>>>> John >>>>>>> Appears at HKLM/System/ControlSet001(and >>>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") >>>>>>> which >>>>>>> I am not allowed to edit: also at ditto\controlset001 (and >>>>>>> 3)/services/bthex/ (and >>>>>>> services/enum/explorerbars/{C4EE31})ImagePath >>>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these >>>>>>> references, could that help?? >>>>>> >>>>>> Is it in the CurrentControlSet? >>>>>> >>>>>> Look for phantom devices in the Device Manager and see if any make >>>>>> mention this BTHEX driver: >>>>>> >>>>>> Device Manager does not display devices that are not connected to the >>>>>> Windows XP-based computer >>>>>> http://support.microsoft.com/kb/315539 >>>>>> >>>>>> This little batch file will automatically set the Device Manager to >>>>>> show >>>>>> phantom devices and open it for you: >>>>>> >>>>>> ---------------------------------------------------- >>>>>> set devmgr_show_nonpresent_devices-1 >>>>>> start devmgmt.msc >>>>>> ---------------------------------------------------- >>>>>> >>>>>> You cannot delete the keys in the Enum section because you do not >>>>>> have >>>>>> permission to do so, grant yourself the necessary permissions and you >>>>>> will be able to remove the keys. Before you do that keep in mind that >>>>>> there is a good reason why only the System account has permission to >>>>>> delete keys in the in the \Enum branch! It would be best to remove >>>>>> the >>>>>> device in the Device Manager instead of removing it from the Enum >>>>>> keys. >>>>>> >>>>>> Before you change the permissions and delete keys please read the >>>>>> following: >>>>>> >>>>>> Enum >>>>>> http://technet.microsoft.com/en-ca/library/cc976176.aspx >>>>>> >>>>>> System and Startup Settings >>>>>> http://technet.microsoft.com/en-us/library/bb742541.aspx >>>>>> >>>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select >>>>>> http://technet.microsoft.com/en-ca/library/cc978528.aspx >>>>>> >>>>>> John >>>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. >>>>> No mention in Device Manager, or after running your batch file. I >>>>> won't try to meddle with Enum, but how do I grant myself permission >>>>> if I did want to?? I will read the articles you mention, but since >>>>> this is the file that is causing my 20 min startup delay, >>>>> ex-infection or otherwise - how do I get rid of my system searching >>>>> for it?? Thanks again. >>>> >>>> The registry permissions are just like regular NTFS file permissions, >>>> just right click on the offending key and select Permissions... >>>> >>>> If you are convinced that this is the culprit and if you cannot remove >>>> the device from the Device Manager then just grant yourself full >>>> control on the key and delete it. For the time being remove it in the >>>> CurrentControlSet only! If the Windows installation balks at its >>>> removal (when you reboot) just boot to the Last Known Good >>>> Configuration. >>> >>> PS. The problem is more likely to be caused by the status of the service >>> in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I >>> suggest that you remove or disable the service there. To disable the >>> service set its Start value to 4. >>> >>> John >> Well, Having deleted it from the CurrentControlSet and rebooted, the >> problem is still there, but Event Viewer no longer reports a problem >> in looking for bthex. So I presume bthex, whatever it is, is *not* the >> reason for my slow progress bar in booting up. Any ideas as to what it >> might now be? Could it be something to do with Power On Self Testing, >> or if not is there any way of diagnosing why this has suddenly started >> occuring? Cheers. > > I think that what you are seeing is part of the Windows boot process > rather than the POST routine, an easy way to tell would be to press/tap > the F8 key when the computer is booting and see how long it takes for > the advanced Windows boot options show up. Or put a second (phony) line > in the boot.ini file and see how long it takes for ntldr to parse and > present the boot menu. > > John When I tap the F8 key the (by now usual) slow clicks and whirrs continue for about 2 mins, then the white progress bar appears and continues another 2 or 3 mins, and then at last the advanced options menu appears. Choosing any option results in the correct procedure, but another 15 mins for the bar to disappear and the Windows start-up logo to kick in. Before all this began, the advanced options screen would appear within seconds. Does this indicate Windows boot routine or POST, and if so what does this indicate? If I placed a phony line in boot.ini what would the length of time tell me? Thank you very much for all your help with this. Richard.
From: Richard on 24 Jun 2010 12:56
On 24/06/2010 17:35, John John - MVP wrote: > John John - MVP wrote: >> Richard wrote: >>> On 24/06/2010 15:09, John John - MVP wrote: >>>> >>>> John John - MVP wrote: >>>>> Richard wrote: >>>>>> On 24/06/2010 14:13, John John - MVP wrote: >>>>>>> Richard wrote: >>>>>>>> On 24/06/2010 13:20, John John - MVP wrote: >>>>>>>>> Richard wrote: >>>>>>>>>> (This may be repeated....if so, sorry!)When I start my computer >>>>>>>>>> (with >>>>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and >>>>>>>>>> before >>>>>>>>>> Windows even kicks in, I get a white progress bar at the bottom >>>>>>>>>> of the >>>>>>>>>> screen that fills up over about 20 minutes before the usual >>>>>>>>>> Windows >>>>>>>>>> logo/start screen appears. Looking at the event viewer for the >>>>>>>>>> System >>>>>>>>>> I find that "boot-start or system-start driver "bthex" was not >>>>>>>>>> found. >>>>>>>>>> Looking in the Registry indicates that bthex is expected to be >>>>>>>>>> found >>>>>>>>>> in Win\System32\Drivers. It is not there, so something has >>>>>>>>>> suddenly >>>>>>>>>> deleted\renamed it or something. I have put my installation DVD >>>>>>>>>> in the >>>>>>>>>> drive and tried a repair but this driver cannot be located there, >>>>>>>>>> and >>>>>>>>>> I have googled for it but with no luck. Can anyone suggest >>>>>>>>>> where I >>>>>>>>>> might find this system file, or maybe even search for it on their >>>>>>>>>> own >>>>>>>>>> Syste32 folder and make it available to me?? Many thanks for any >>>>>>>>>> help >>>>>>>>>> in advance. >>>>>>>>> >>>>>>>>> If it's a driver it would be a .sys file (not a .dll). A search >>>>>>>>> for this >>>>>>>>> file yields no results, often an indication that the file is >>>>>>>>> virus or >>>>>>>>> malware related. I would suggest that you make sure that the >>>>>>>>> machine is >>>>>>>>> free of any pests. >>>>>>>>> >>>>>>>>> Where *exactly* in the registry did you find reference to this >>>>>>>>> file? It >>>>>>>>> could be that your Anti-Virus tools have removed an infection and >>>>>>>>> that >>>>>>>>> the entry is just a remnant. >>>>>>>>> >>>>>>>>> John >>>>>>>> Appears at HKLM/System/ControlSet001(and >>>>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") >>>>>>>> which >>>>>>>> I am not allowed to edit: also at ditto\controlset001 (and >>>>>>>> 3)/services/bthex/ (and >>>>>>>> services/enum/explorerbars/{C4EE31})ImagePath >>>>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all >>>>>>>> these >>>>>>>> references, could that help?? >>>>>>> >>>>>>> Is it in the CurrentControlSet? >>>>>>> >>>>>>> Look for phantom devices in the Device Manager and see if any make >>>>>>> mention this BTHEX driver: >>>>>>> >>>>>>> Device Manager does not display devices that are not connected to >>>>>>> the >>>>>>> Windows XP-based computer >>>>>>> http://support.microsoft.com/kb/315539 >>>>>>> >>>>>>> This little batch file will automatically set the Device Manager to >>>>>>> show >>>>>>> phantom devices and open it for you: >>>>>>> >>>>>>> ---------------------------------------------------- >>>>>>> set devmgr_show_nonpresent_devices-1 >>>>>>> start devmgmt.msc >>>>>>> ---------------------------------------------------- >>>>>>> >>>>>>> You cannot delete the keys in the Enum section because you do not >>>>>>> have >>>>>>> permission to do so, grant yourself the necessary permissions and >>>>>>> you >>>>>>> will be able to remove the keys. Before you do that keep in mind >>>>>>> that >>>>>>> there is a good reason why only the System account has permission to >>>>>>> delete keys in the in the \Enum branch! It would be best to >>>>>>> remove the >>>>>>> device in the Device Manager instead of removing it from the Enum >>>>>>> keys. >>>>>>> >>>>>>> Before you change the permissions and delete keys please read the >>>>>>> following: >>>>>>> >>>>>>> Enum >>>>>>> http://technet.microsoft.com/en-ca/library/cc976176.aspx >>>>>>> >>>>>>> System and Startup Settings >>>>>>> http://technet.microsoft.com/en-us/library/bb742541.aspx >>>>>>> >>>>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select >>>>>>> http://technet.microsoft.com/en-ca/library/cc978528.aspx >>>>>>> >>>>>>> John >>>>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. >>>>>> No mention in Device Manager, or after running your batch file. I >>>>>> won't try to meddle with Enum, but how do I grant myself permission >>>>>> if I did want to?? I will read the articles you mention, but since >>>>>> this is the file that is causing my 20 min startup delay, >>>>>> ex-infection or otherwise - how do I get rid of my system searching >>>>>> for it?? Thanks again. >>>>> >>>>> The registry permissions are just like regular NTFS file permissions, >>>>> just right click on the offending key and select Permissions... >>>>> >>>>> If you are convinced that this is the culprit and if you cannot remove >>>>> the device from the Device Manager then just grant yourself full >>>>> control on the key and delete it. For the time being remove it in the >>>>> CurrentControlSet only! If the Windows installation balks at its >>>>> removal (when you reboot) just boot to the Last Known Good >>>>> Configuration. >>>> >>>> PS. The problem is more likely to be caused by the status of the >>>> service >>>> in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I >>>> suggest that you remove or disable the service there. To disable the >>>> service set its Start value to 4. >>>> >>>> John >>> Well, Having deleted it from the CurrentControlSet and rebooted, the >>> problem is still there, but Event Viewer no longer reports a problem >>> in looking for bthex. So I presume bthex, whatever it is, is *not* >>> the reason for my slow progress bar in booting up. Any ideas as to >>> what it might now be? Could it be something to do with Power On Self >>> Testing, or if not is there any way of diagnosing why this has >>> suddenly started occuring? Cheers. >> >> I think that what you are seeing is part of the Windows boot process >> rather than the POST routine, an easy way to tell would be to >> press/tap the F8 key when the computer is booting and see how long it >> takes for the advanced Windows boot options show up. Or put a second >> (phony) line in the boot.ini file and see how long it takes for ntldr >> to parse and present the boot menu. > > What is the make and model of the computer? If you determine that the > hang is happening before the Windows boot process you can look in the > BIOS and see if you have a non present IDE device enabled. Some > computers (older Dells, for example) will hang for a very long time > after/during the POST routine if a hard drive enabled in the BIOS is not > present. > > John It is a Compaq Presario 061 SR 1519UK. I will do that now, so will be gone a while. |