Possible Service Pack 2 Issue. Need Help.

[Jodarfett]

Hi Guys, I just joined the forums today and wanted to bring up an issue that recently happened to a computer that I service.

It runs Vista Home Premium 32-bit with 2GB RAM, 160GB, Toshiba Satellite 205D, with CA Security software and no known issues with Service Pack 1 other than some typical 10-15 minute start up time associated with Vista.

However, the problem I ran into was that after installing Service Pack 2, some kind of error or glitch started occurring. What happens is that I restarted the computer after the install, and when Vista boots to the desktop, only about 5 icons in the tray would show when usually there are 10-12 that display. So I then tried opening Internet Explorer and you see the hourglass symbol show next to the cursor showing that it is working, but then it disappears and nothing displays. No window shows for IE. I tried launching other programs and the same problem occurs. No windows would display, but in the Task Manager, I see the processes running.

So I figure the issue is related to Service Pack upgrade, so I restored to the point before the Service Pack 2 upgrade. Everything worked fine. So I tested the computer after a restart again and again the non-window launching error occurs.

I stumbled acorss some proccessing issues with CA Security software that would hog some memory, but I am unsure that it is the reason for this error. Could it be that the Service Pack may have installed improperly, thus, creating some kind of window error? Or do you think it could be related to some preinstalled program having incompatibility with the Service Pack?

I have contacted Microsoft support and they suggested resetting IE, but I don't think that is the solution. I haven't tried it yet. I sent them a HiJackThis log and they reported no problems with it. No viruses or issues to report from a Malwarebytes scan either.

Any help would be greatly appreciated. Thanks.

 

[Flavius]

Detecting incompatible programs will be hard - even MS don't know which programs cause problems with service packs and hotfixes.HJT is too weak -prepare logs from OTL http://oldtimer.geekstogo.com/OTL.exe (leave original program settings) and create logs MAIN+EXTRAS -both logs attache to post.

 

[Jodarfett]

Thanks for the tip on OTL. Is the program safe for me to run? It's just that I never heard of it before. I don't want to download and run something that could possibly be malicious. I just ask to double check. Also, I forgot to mention that after booting into Safe Mode with Networking, the computer has no issues whatsoever launching programs and displaying their windows. It's only in normal mode that the error occurs.

 

[Flavius]

Thanks for the tip on OTL. Is the program safe for me to run?

The same safe (or as you wish dangerous) like HJT .I've never use truly dangerous tools like ComboFix which you surly mean.

 

[Jodarfett]

Ok, let me run OTL and I'll post the log for you. Yes, I agre, HJT is both safe and dangerous, depending on how you use it. Thanks.

 

[Jodarfett]

Oh, I forgot to ask, should I be running OTL in normal mode? I read somewhere it should only be run in Normal Mode. If so, I would be running after I restore to a point where the problem doesn't occur. But if I try to run it when the program does occur, it won't display the OTL window. What is your suggestion for running the OTL?

 

[Flavius]

Oh, I forgot to ask, should I be running OTL in normal mode? I read somewhere it should only be run in Normal Mode. If so, I would be running after I restore to a point where the problem doesn't occur. But if I try to run it when the program does occur, it won't display the OTL window. What is your suggestion for running the OTL?

Oh my Got!Run OTL in normal mode in current system status.Don't enjoy system restore!

 

[Jodarfett]

What do you mean by don't enjoy system restore? I am unable to do anything after a restart unless I do a system restore. If I open OTL after the error occurs, I do not see any window for OTL for me to create a log.

 

[Jodarfett]

Here is the log created after a system restore with Service Pack 2 running in Normal Mode without any problems. Unfortunately, I cannot send the body of the text in this message, so I had to attach the MAIN and EXTRAS log to this message. Let me know what you find. Thank you.

 

[Jodarfett]

After restarting and still not being able to see application windows after they launch, I noticed that multiple programs didn't start up. So instead of about 30 or so processes starting up when the computer is working perfectly, I only see about 10-15 processes starting up when the computer is borked. Obviously Vista isn't properly booting all the processes needed for the computer to launch application windows correctly. Any ideas as to what could be causing this?

 

[Flavius]

Any ideas as to what could be causing this?

The most suspicious

CA Internet Security Suite ->I recommend completely uninstall this software.

(I'll later edit this post)

 

[Jodarfett]

Ya man, I figured that the CA security software could be the cause of the improper start up. I haven't tried uninstalling it, but I will try that soon after a clean reboot and see if that shows any results. My client claimed he downloaded and installed the software through a pop up link, but have read that the CA security software is a legitimate antivirus software used by many people. However, I also know that some people have been having issues with some of the filters that slow the computer down, so it could be that this software is also improperly booting the system.

I will post back the results of the clean boot, then the uninstall of the CA security software at a later time. Thanks Flavius. Let me know what else you find and thank you so much for helping me out.

 

[Flavius]

You didn't let me finish my previous post and I had no time before ..

Independly from results in clean boot I still recommend uninstal completely CA Internet Security - I don't be surprised if even in clean boot some process of CA still work.Pernamently disabling 3p modern firewall is almost impossible.Below example from forum where firewall cheated clean boot (read all):
http://www.vistax64.com/general-discussion/184462-windows-command-processor-problem.html

Since this time I met many this kind of cases

Why even in clean boot some 3p firewals processes still working? I don't know exactlly but I suspect some firewals drivers service don't depends directly from own services only from system services,besides security software modify Winsock -yes this strickly system driver service but 3p security software hang under this service own modules and then modify it.

I suspect firewall from CA responsible for trouble in icon tray and running some processess too,it adds to tray full icon

O4 - HKLM..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe (CA, Inc.)
O4 - HKLM..\Run: [CAVRID] C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe (CA, Inc.)
O4 - HKLM..\Run: [cctray] C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe (CA, Inc.)
O4 - HKLM..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe (CA, Inc.)
O4 - HKLM..\Run: [dvHighMem] C:\Windows\cfgmng32.exe ()
O4 - HKLM..\Run: [QOELOADER] C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe (CA)

A lot icons in tray or too agressive firewal may cause issue with loading someones
yes there is method to reset icon tray http://www.vistax64.com/tutorials/99008-notification-icons-reset.html
But if you have really issue with it then you have to repeat it from time to time.To prevent this the best way to limit icons in tray.CA add too much icons to tray even as full security software.Besides in my opinison systems like Vista ,Windows 7 don't need good firewall.Turned on UAC which separate admin & limited user rights ensure perfect protection against viruses which don't give any firewall,besides 3p firewall may cause many problems for example:

-slower bootup (almost always it heppen)

and some times:

- trouble with running some programs
-trouble with WU
-trouble with running programs which required admin previlliges (conflict with UAC)
-blockade of internet
-blockade of shared folders

and other

So 3p firewall is unnesessary weight for system.
I can see you are using UAC

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1

And of course it is very good.


I reccommend replace it any good antivirus -not any full security internet software or 3p firewall! (the best way with already build-in antispyware module)

for example
AVG
AVG Free - Pobierz bezpłatny Anti-Virus i Anti-Spyware dla systemów Windows 7, Vista i·XP

RISING Antivirus
Rising - Antivirus,Firewall,Virus,Trojan,Worm Protection,Free Download

or the new one:
Microsoft Security Essentials
http://www.microsoft.com/Security_Essentials/

If you want special good and commercial version don't deter you I recommend
Kaspersky Antivirus:
Anti-Virus Software with Anti-Spyware Protection - Kaspersky Lab United States

and firewall enable in your router .

Besides romeve some orphans and unnessary things:

Run again OTL and in Custum Scans/Fixes paste following text

:OTL
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [HWSetup] File not found
O4 - HKLM..\Run: [NDSTray.exe] File not found
O4 - HKCU..\Run: [TOSCDSPD] File not found

:Files
C:\51f7ad8e0b9be530b0fa

Click on "RunFix" apply +restart

 

[Jodarfett]

Hi Flavius,

I wanted to report to you that after finally getting the passwords to uninstall the CA security software, I was able to successfully uninstall the software and now the computer boots flawlessly! It's really amazing how slow the computer booted with the software installed. Now that it's gone, it feels like a fresh, new computer. Haha.

Thanks for all the help and if ever I need help with anything, I'll be sure to come to you. Thanks again. And as an extra note, I noticed that when the computer had the problem booting, I let it sit idle for about 15-20 minutes, and then all the processes would boot normally and then I could use the computer just fine. So it probably just meant that the computer was still starting all services, but you could actually see the desktop. However, you couldn't use the computer properly until you waited 15-20 when all the processes were finally done starting.

For those of you who ever come across CA Internet Security, BE WARNED that it may slow your entire system down. If you have it in your computer already, be prepared to have your account info, your Administrator Parental Controls info, and your security code on hand if you are considering uninstalling the software because that's how difficult it is to uninstall this lame software.

As a result, I have installed the newly updated AVG 9 Free Edition and it works great!

Remember, CA Internet Security= Ultra slow computer boot times.

 

[bhakeman]

My latest 'windows update' says I need to update to SP2... I'm thinking of holding off on updating.

 

[Frostmourne]

You shouldn't. Get Windows 7 instead.

 

[bhakeman]

You shouldn't. Get Windows 7 instead.

Ok, give me a copy, then... :D Not planning on buying 7 anytime soon. my pc is only a year and a half old.

 

[Frostmourne]

That's the price of technology. 7 is vastly better than Vista, and I'm paying retail for the full version of Ultimate. If not, get SP2, Windows always needs to be updated fully.

 

[Jodarfett]

I agree with Frostmourne. Windows should always have the newest updates so that you have the newest fixes and patches that Microsoft may have missed. It turns out that the Service Pack 2 for Vista was not the cause of the error. In fact, it was the CA Internet Security Suite software which I personally do not recommend.

The computer is currently using Service Pack 2 and is working flawlessly. So, for once, this issue was not caused by Vista. Just make sure to backup really important files before updating just in case your restore point doesn't work.

On the Windows 7 note, I would highly recommend upgrading to it if you have Vista and have a computer only a year and a half old. The reason being that you pretty much get what Vista was supposed to be like when it came out. It's polished, it's faster, and it's leaner which are definitely good things from an OS.

 

[bhakeman]

That's the price of technology. 7 is vastly better than Vista, and I'm paying retail for the full version of Ultimate. If not, get SP2, Windows always needs to be updated fully.

Well I updated, and it still works.