General SecurityPost any general questions related to security, viruses or spyware here.
Mission Statement
WindowsBBS is an online community dedicated to easily accessible technical support for those using Microsoft operating systems and other Windows software.
Our goal is to become the leading resource for computer users that require assistance with their day-to-day computer usage, including full support for networking PC's, virus & malware removal, system upgrades and general support questions.
Edit Note: 7/20 - thread moved from XP to Security now that it contains a Hijackthis log. Newt
Hi all, I'm in Denver today helping my son on his computer which is getting very slow. There are a couple of issues going on.
His computer has begun to run slower and slower as time goes on.
When I run chkdsk /f I get an error saying it can't run because the volume is in use by another process. When I tell it to run after reboot I don't know if it runs or not. So thought I would run it in safe mode. When I try to boot in safe mode the system hangs at the driver agp440.sys.
I tried running sfc /scannow but the system hangs at agp44.sys.
I did a google on agp440.sys but found no answers. I'm thinking the driver is corrupt but can't find out how to replace it.... the driver is distributed by MS.
Would appreciate any direction y'all can provide. Leaving for Corpus Christi on Tuesday AM so don't have alot of time..... of course, who does
Didn't find the information you thought to find? Check out these Similar Threads
Only problem with doing this is you'll have basic video driver. I'd check into the video card first. Go and get the driver updates for it. (agp440.sys is video)
I agree that chkdsk and sfc are certainly a great idea to run at this point.
After that, since the symptom you mention, His computer has begun to run slower and slower as time goes on. is a usual effect of spyware, you want to make sure the system is as clean as possible. Ad-aware and Spybot (from Quicklinks in my signature) for starters and let them remove all the bad stuff they are able to find. Dump the contents of each Temp folder on the PC and the TIF (temporary internet files).
After all of that, generate a log with Hijackthis (quicklinks again) and post it here. At that point, this thread will be moved to the security section.
Thanks guys, downloaded the latest and greatest from Nvidia and was able to boot in safe mode. That didn't help me run chkdsk as it still says the volume is in use by another.....
Will post back after running AdAware and spybot and hijackthis....
We're running with XP Home and all updates are installed on a Compaq Presario 6024US.
The following is the Hijackthis Log:
Logfile of HijackThis v1.98.0
Scan saved at 8:17:42 PM, on 7/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
If the drive you're trying to run chkdsk on is the drive Windows is installed on you won't be able to do it without letting it schedule it to run on boot because it's always in use by Windows. Try letting it run on startup and see what happens.
Thanks Zander, I have told it to run on the next startup but I've done this about 6 times now and it only ran once. I want to run it again to insure errors have been fixed and so far it doesn't run at startup even though I say yes when it offers to do this....
Is it's possible it runs and you just don't see it? Check in msconfig on the boot.ini tab and see if NOBOOTGUI is checked. If so, uncheck it. It has the side effect of also not showing chkdsk while it runs. You can also look in the event viewer in the application part to see if it ran or not. Should be in an entry named winlogon.
Zander, I still haven't been able to get chkdsk to run at startup. When checking the Event Viewer under winlogon it says: "The shell stopped unexpectedly and Explorer.exe was restarted."
Don't know what is killing it but as 'ol bones in Star Trek would say, "She's dead Jim, dead."
Right click my computer and choose properties. On the advanced tab click on the settings button under startup and recovery. See if the line that says automatically restart under system failure is checked. If so, uncheck it and then schedule a chkdsk, restart the computer and see if you get an error message. If you do, write it down and post it here.
The Automatick restart was checked and now is unchecked, I then told chdsk to run at reboot and restart the puter. Still recieve the same error message. "The shell stopped unexpectedly and Explorer.exe was restarted."
OK. Progress. There is some junk shown in the Hijackthis log that needs to go. Some I know about but others where I'm not sure so will wait and let one of the HJT pros give suggestions on that.
ZA could well be causing many of the problems. Not sure but I think if it were me I'd remove it and see if things get better. There are versions that aren't causing problems. I think 4.5 was fine and there may be a 5.x version that has the bugs killed off. Don't use it and not sure.
Chkdsk - boot from the XP CD to the recovery console and run chkdsk /r from there. It will run that way since the HD software won't be loaded.
It's quite possible ZA is causing the problem as it adds a service (True Vector Internet Monitor). From what I've read about this problem apparently it's often caused by services added by installed apps. A couple more examples of some that do this are Diskeeper and I know some video cards will also add a service. You can see if it's ZA causing the problem by setting to not run at startup in the preferences section of ZA. When it's set to run at startup the True Vector Internet Monitor service is set to automatic and will always start when you start windows. When it's set to not run at startup the TVIM service will be set to manual and won't start unless you start ZA. If you do this, be sure to first turn on XP's native firewall or disconnect your internet connection if you're on cable or something similar. Also, I'd check in the services (start>run>services.msc) and see if there's any others there that have been added by an installed app. If ZA turns out to not be the problem and there are others, try disabling them.
Quote:
The Automatick restart was checked and now is unchecked, I then told chdsk to run at reboot and restart the puter. Still recieve the same error message. "The shell stopped unexpectedly and Explorer.exe was restarted."
It doesn't surprise me. I thought about this more after I posted that and realized you never said anything about the system rebooting. I figured I'd leave the post as is though as it's something you should do anyway. Could save a lot of trouble in the future.
