Corrupt WINNT File (?) Causes Constant Bootup Freezes

Discussion in 'Software' started by so777, Jun 12, 2010.

  1. so777

    so777 Private E-2

    My laptop (more details on it below) showed a “WINNT/CSC/CSC1.tmp corrupt and unreadable -run chkdsk utility” message awhile back. Now system freezes midway through bootup or boots up then freezes after about 30 seconds. Then its not responsive to mouse, keypad, typing or ctrl-alt-del. I’m still unable to restore my computer trying what I’ve seen here and a few other boards. A friend says my HD may be dying.

    SYSTEM IS:

    -Dell Latitude C610 Intel Pentium III, Windows 2000 Service Pack 4
    -Running Outlook, Explorer, nothing fancy
    -Runs fine in safe mode
    -Programs also run fine in safe mode
    -I can hear the HD and fan running
    -I have not added any hardware or software lately

    HERE’S WHAT I’VE DONE:

    -Removed and put HD back in (40 GB Hitachi DK23DA-40F)
    -Ran chkdsk
    -Defragged
    -Ran disk cleanup utility
    -Can’t find files or folders named CSC or CSC1.tmp anywhere
    -Uninst. program called “DMA” from Bittorrent – don’t know how that got on
    -Uninstalled Opera browser, some other crap I don’t need
    -Offloaded about 10GB of other files to an external drive

    Any help would be greatly appreciated. I’m unemployed (hence the old system) and really can’t afford much of an upgrade or a new machine. Sorry for the long post but wanted to include as much detail as I could.
     
  2. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    CSC stands for client side caching
    If you aren't attaching the laptop in a business setting then I think the CSC directory is not needed so I would not worry about its disappearance.

    This is the only DMA acronym that I'm familiar with
    http://en.wikipedia.org/wiki/Direct_memory_access
    so I'm not quite sure what you actually removed.

    Since it runs okay in safe mode, this indicates some program or bad driver trying to load causing the freeze.

    I'll need to fire up my 2K computer in safe mode to see what options are available for you to do a minimal start in normal mode. This will have to wait, on my end, until sometime this evening.
     
  3. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Fire up the computer and at bootup press F8.
    First try last known Good Configuration. This is in case you removed a critical windows file that you should not have. Hopefully windows will boot up normally.

    If that doesn't work, reboot and click F8 again but this time select either Safe Mode with Networking or Safe Mode. Next click on Run and type msconfig in the box and press enter. Click the startup tab and post what things are loading at startup.

    After I look over the list, I'll tell you what you uncheck/untick and maybe the computer will boot using a selective startup.
     
  4. so777

    so777 Private E-2

    Awesome. Thanks for the response. And so quickly too. No luck. Here’s what happened:

    With Last Known Good Configuration, froze at startup screen with mouse plugged in. Tried without mouse plugged in, it booted up and looked normal but then no response from trackpad/keyboard, ctrl-alt-del. (Note I am doing all this without any external devices attached to the system.)

    Now, here’s where it got interesting. When I went into Run and typed msconfig I got the “cannot find the file or one of its components” message!

    When this whole saga first happened and I transferred a lot of data off the internal HD to an external I didn’t touch the program files folder, so I don’t think I (intentionally) deleted anything important like msconfig.

    Here’s something that might be interesting: In my c:/winnt folder there are loads of subfolders (about 182) with names like “$NtUninstallKB890046$” all varying by one digit or letter. Maybe this whole thing is caused by a virus? I subscribe to Windows automatic security updates but that’s it.

    Thanks again for your help with this.
     
  5. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Those files starting with $ are normal - don't worry about them. These are windows updates/patches.

    My bad...I forgot that on my windows 2K, I installed something so I could run msconfig because windows 2000 does not have this!

    Tomorrow, I'll do some searching through my notes and see if I can find the file that needs installing.

    Am I understanding that your touchpad does not work?
    If you can get into the BIOS (might be F10 on that Dell), look to see that the touchpad is enabled,
     
  6. so777

    so777 Private E-2

    I can't figure out how to get into the BIOS, but when I check the system's hardware settings for the mouse and touchpad it indicates both "devices are working properly."

    Now, they do work properly in safe mode, just not when I boot up regularly. Its just as if my system suddenly lacks an interface.
     
  7. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Safe mode does not load up all the drivers so if they work in safe mode but not normal mode it still indicates that either a bad driver or a program is loading that causes a conflict.

    Here's the msconfig file and it tells you where to place it.
    http://www.techadvice.com/win2000/m/msconfig_w2k.htm

    After you have it running, click on the startup tab and list the things showing under the column Startup Item so I can search to see what can be disabled safely from running at startup.
     
  8. so777

    so777 Private E-2

    OK. Thanks. Here's the list:

    mobsync; Ati2mdxx; atiptaxx; pctspk; SynTPLpr; SynTPEnh; DVDLauncher; ZCfgSvc; PRONoMgr; UIUCU; hpztsb09; hphupd05; hpcmpmgr; HPWuSchd2; hphmon05; qttask; iTunesHelper; realsched; OpwareSE2; ctfmon; AdobeUpdateManager; MicrosoftOffice; AdobeReaderSpeedLaunch; OpenOffice.org 2.0; PowerReg Scheduler V3.
     
  9. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Without doing any research, disable these immediately: qttask, realsched, AdobeUpdateManager, MicrosoftOffice, AdobeReaderSpeedLaunch, OpenOffice.org 2.0

    I'll look over the others because I'm sure some of the hp items can be disabled from running at startup.
     
  10. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    1. mobsync keep enabled
    2. Ati2mdxx disable; this is not needed to run at startup
    3. atiptaxx disable
    http://www.pcpitstop.com/libraries/process/i/atiptaxx.exe.html
    says
    4. pctspk has to do with your modem. If you never use the modem in your laptop, you can disable it, otherwise let it remain enabled.
    5. SynTPLpr enable this is your touchpad driver
    6. SynTPEnh enable this is the tray icon for your touchpad
    7. DVDLauncher found conflicting things on this. Some say it is associated with Cyberlink Power Cinema. I fired up a computer with Cyberlink DVD Suite and I do not have anything running at startup.
    Disable it and if you notice the DVDs are not playable (mine play fine whenever I put a movie into the drive), simply enable it again.
    8. ZCfgSvc allow it has to do with the wireless adapterin your notebook
    9. PRONoMgr allow; this is the tray icon for your wireless adapter
    10. UIUCU disable It has something to do with Conexant and the found new hardware wizard
    11. hpztsb09 disable This is the HP Toolbox and you can reach it through the program list
    12. hphupd05 disable This has to do with checking for updates for PhotoSmart. If Photosmart seems to need a fix, you can check for updates yourself. My theory, if it isn't broken, it does not need an update!
    13. hpcmpmgr disable
    http://www.pcpitstop.com/libraries/process/i/hpcmpmgr.exe.html
    I will look at items 14 to 25 on Friday. In the meantime, go into the startup tab of msconfig and remove the checks/ticks from thos things I said to disable. You will get a popup when the computer is starting about msconfig running in selective startup mode. Don't worry about it. This is normal and we will fix it.

    I will also get you a better way to manage those programs that insist on running at startup. Msconfig is not the way to do it BUT I'm asking you to try it this way, just to see if your computer boots up a lot better than it has been doing. If you notice a big improvement, then we are on the right path for a fix.
    When we use a different program, we will put the checks/ticks back into msconfig and you will not get the popup box everytime you start your computer.
     
  11. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Okay, lets do this the proper way.
    Download and install Startup Control Panel. It doesn't have many bells and whistles and works well in windows 2000.
    http://majorgeeks.com/Startup_Control_Panel_Standalone_Version_d4359.html

    Run msconfig and put all the checkmarks back at the startup entries.

    Then start removing checkmarks from the 1 - 13 items I have listed above. Finding these items in Startup Control Panel. To lauch SCP, open Control Panel abnd you will see a new icon titled Startup. Click it and you will discover everything that wants to run at startup. If you make a mistake an uncheck something you did not want to stop, it is easy to fix.

    Here is the remainder:
    14. HPWuSchd2 disable; it uses excessive system and memory resources
    15. hpmon05 keep; provides access to Photosmart Camera flash cards
    16. qttask disable; it uses excessive system and memory resources
    17. iTunesHelper keep; comes bundled with QuickTime v7 and newer. If you disable it, you might not have sound.
    18. realscheh
    Launch RealOne (in programs) and select Tools then Preferences then Automatic Services. Uncheck everything from there and this should leave from startup on its own.
    There might also be an icon in your tray, called Start Ceneter. Right click the icon, select Preferences. On the General tab click Settings button and under Start Center uncheck Enable Start Center and this icon should disappear.
    19. OpwareSE32 disable; part of OmniPage Pro. You can run this, as needed from the list of programs.
    20. Read http://support.microsoft.com/kb/282599
    I have this running (enabled) on my windows 2k computer and don't notice a slowdown. If you don't know if you need it, then play it safe and keep it enabled.
    21. AdoneUpdateManager disable
    22. MicrosoftOffice disable unless you use the MicrosoftOffice Shortcut Bar outside of an office program then keep it enabled.
    23. AdobeReaderSpeedLaunch disable
    24. OpenOffice.org 2.0
    Open OO and click on Tools then Options. Expand the Oo_Org list on the left and select memory. Uncheck Load OpenOffice.org during system startup and this entry will disappear on its own.
    25. PowerReg Scheduler V3 disable (this is some sort of reminder to register a program) It does not need to load at startup.
     
  12. so777

    so777 Private E-2

    First of all let me say you are awesome for doing all this. Regrettably this hasn't seemed to help. Same problem, still runs OK in safe mode, etc. Here are a few more things I thought I'd throw out after going back through my notes and trying things.

    - Around the time the problem started, upon shutting down the computer, I would sometimes get the message that the "sample" program was not responding and did I want to end now, etc. I would always have to end now.

    - Today I tried running the Malwarebytes program (free version) from safe mode and it freezes upon scanning. Tried a few times. It starts scanning the C:\WINNT\system 32 folder, lasts about 3-5 seconds, indicates 2 objects are infected, then freezes. This is pretty consistent.
     
  13. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    It sounds like there is some sort of malware on your computer.
    I suggest you go here
    http://forums.majorgeeks.com/showthread.php?t=35407
    then download the MGTools and follow the cleaning procedure for Windows 2000.
    When you have the logs, start a new thread here:
    http://forums.majorgeeks.com/forumdisplay.php?f=35
    and add your logs as attachments.
    If something refuses to run, continue to do as much as you can and post what logs you get.

    Please also post a link to this thread so the malware fighters can quickly look at the background information.

    Be patient. After you post your logs, it can take from 2 - 5 days for someone to get to help you. There are a lot of infected computers but not so many malware fighters able to read all the logs and tell you exactly what to clean.
    They will get your computer clean. good luck and come back to this thread once you are sorted out to let me know if your computer is behaving.
     
  14. so777

    so777 Private E-2

    OK. Thank you. So am I correct to assume you mean just go with MG Tools right now rather than the full cleaning procedure outlined?
     
  15. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    No. You need to go with the full clean for windows 2000. Part of the cleaning involves downloading and running the MGTools.
    The only way you can be sure that your computer is working correctly and is free of malware is to take the time to do all the steps.

    Again, if you have trouble with a step, write down the problem (and any errors if shown) and continue to the next step. When you post, if you had trouble and had to skip something, post what happened when you tried it.
     
  16. so777

    so777 Private E-2

    OK. Thanks again!:)
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Just stopping in for an FYI.

    This is not due to malware. This is due to the wireless zero service.

    Problems with this PC are not due to malware even though a couple of malware files were removed during the cleaning process.
     
    Last edited: Jun 19, 2010
  18. so777

    so777 Private E-2

    Thanks. Returning to this thread and quoting below.

    I now have the following running at startup: mobsync; SynTPLpr; SynTPEnh; ZCfgSvc; PRONoMgr; hphmon05; ctfmon.

    I disabled ZCfgSvc and PRONoMgr via MSCONFIG and now the system boots in Selective Startup, which is progress! But I'm at a loss in terms of next steps.

     
  19. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Enable them again.
    Next, go back to post #11 and grab a copy of Startup Control panel. Install it and start disabling items using that instead of msconfig.
    Msconfig is a good short term solution to help troubleshoot BUT it eventually gets replaced with one of two programs: Startup Control panel or WinPatrol. Since you are running Win 2K, I chose the easier of the two programs.

    Read through what I suggested as enabling and disabling.
    One correction: item #8, ZCfgSvc allow change this to disable as per Chaslang's recommendation.
     
  20. so777

    so777 Private E-2

    Ugh. Now I can't even boot at all. Getting "Windows 2000 could not start b/c the following file is missing or corrupt: WINNT/SYSTEM32/CONFIG/SYSTEMced startup options for windows press 8. You can attempt to repair this file by starting windows using the original CD ROM..."

    Given my CD drive doesn't work, look's like I'm sunk.
     
  21. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Is this exactly what appears?
    If so, I found this http://support.microsoft.com/kb/269075
    The first resolution doesn't seem to apply.

    The second resolution seems possible except, you probably do not have a windows 2000 CD and as you stated, your CD drive doesn't work.

    At this point, I don't know what else to tell you to try.
     
  22. so777

    so777 Private E-2

    Yes. Thanks for all your help. It was a valiant effort.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds