start up



12fred
07-10-2005, 12:41 AM
My PC jams at start up. The only way I can get it going is to press
alt/control/delete. The task manager comes on and I delete DrWatson. Then it
works. Sometimes DrWatson comes on at start up, and when I press for details
I get:

EventType : BEX P1 : drwtsn32.exe P2 : 5.1.2600.0 P3 : 3b7d84a2
P4 : dbghelp.dll P5 : 5.1.2600.2180 P6 : 4110969a P7 : 0001295d
P8 : c0000409 P9 : 00000000

I've tried deleting DrWatson from the PC, but it keeps coming back.

Rick \Nutcase\ Rogers
07-10-2005, 12:41 AM
Hi,

Isolate what DrWatson is intercepting:

How to Troubleshoot By Using the Msconfig Utility in Windows XP [Q310560]
http://support.microsoft.com/?kbid=310560

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"12fred" <12fred@discussions.microsoft.com> wrote in message
news:B9A2A60B-E44C-41FC-8DC5-B54113F6EA04@microsoft.com...
> My PC jams at start up. The only way I can get it going is to press
> alt/control/delete. The task manager comes on and I delete DrWatson. Then
> it
> works. Sometimes DrWatson comes on at start up, and when I press for
> details
> I get:
>
> EventType : BEX P1 : drwtsn32.exe P2 : 5.1.2600.0 P3 :
> 3b7d84a2
> P4 : dbghelp.dll P5 : 5.1.2600.2180 P6 : 4110969a P7 :
> 0001295d
> P8 : c0000409 P9 : 00000000
>
> I've tried deleting DrWatson from the PC, but it keeps coming back.
>

S.Sengupta
07-10-2005, 12:41 AM
Dr. Watson for Windows is a program error debugger that gathers
information about your computer when an error (or user-mode fault)
occurs with a program.
Better do the followings:-
'How to troubleshoot by using the System Configuration utility in
Windows XP'
http://support.microsoft.com/default.aspx?scid=kb;en-us;310560

How to perform a clean boot in Windows XP
http://support.microsoft.com/kb/310353

How to perform advanced clean-boot troubleshooting in Windows XP
http://support.microsoft.com/?id=316434


scan your system with latest virus definitioned
antivirus.Download,install and run the latest versions of Spybot,search
and destroy,CWShredder as well as with adaware.

[if you want to disable Dr.Watson:-
http://support.microsoft.com/default.aspx?scid=kb;en-us;188296 ]

regards,
ssg MS-MVP




12fred wrote:

> My PC jams at start up. The only way I can get it going is to press
> alt/control/delete. The task manager comes on and I delete DrWatson. Then it
> works. Sometimes DrWatson comes on at start up, and when I press for details
> I get:
>
> EventType : BEX P1 : drwtsn32.exe P2 : 5.1.2600.0 P3 : 3b7d84a2
> P4 : dbghelp.dll P5 : 5.1.2600.2180 P6 : 4110969a P7 : 0001295d
> P8 : c0000409 P9 : 00000000
>
> I've tried deleting DrWatson from the PC, but it keeps coming back.
>

12fred
07-10-2005, 12:46 AM
"S.Sengupta" wrote:

> Dr. Watson for Windows is a program error debugger that gathers
> information about your computer when an error (or user-mode fault)
> occurs with a program.
> Better do the followings:-
> 'How to troubleshoot by using the System Configuration utility in
> Windows XP'
> http://support.microsoft.com/default.aspx?scid=kb;en-us;310560
>
> How to perform a clean boot in Windows XP
> http://support.microsoft.com/kb/310353
>
> How to perform advanced clean-boot troubleshooting in Windows XP
> http://support.microsoft.com/?id=316434
>
>
> scan your system with latest virus definitioned
> antivirus.Download,install and run the latest versions of Spybot,search
> and destroy,CWShredder as well as with adaware.
>
> [if you want to disable Dr.Watson:-
> http://support.microsoft.com/default.aspx?scid=kb;en-us;188296 ]
>
> regards,
> ssg MS-MVP
>
>
>
>
> 12fred wrote:
>
> > My PC jams at start up. The only way I can get it going is to press
> > alt/control/delete. The task manager comes on and I delete DrWatson. Then it
> > works. Sometimes DrWatson comes on at start up, and when I press for details
> > I get:
> >
> > EventType : BEX P1 : drwtsn32.exe P2 : 5.1.2600.0 P3 : 3b7d84a2
> > P4 : dbghelp.dll P5 : 5.1.2600.2180 P6 : 4110969a P7 : 0001295d
> > P8 : c0000409 P9 : 00000000
> >
> > I've tried deleting DrWatson from the PC, but it keeps coming back.
> >
>

12fred
07-10-2005, 12:46 AM
I've identified the problem as a virus-- W32Bagle.dl, But I don't know how
to get rid of it. I downloaded BAGLEGUI from Sophos, but when I ran it it
didn't turn anything up.

Malke
07-10-2005, 12:46 AM
12fred wrote:

>
> I've identified the problem as a virus-- W32Bagle.dl, But I don't know
> how to get rid of it. I downloaded BAGLEGUI from Sophos, but when I
> ran it it didn't turn anything up.

What did you do to identify the virus? What antivirus do you have
installed (name, version and whether the definitions are current)? If
you don't have a full-featured av installed, start cleaning with
TrendMicro's Sysclean:

TrendMicro's Sysclean is an extensive antivirus tool which has the
advantage of not needing to be installed. It requires two parts - the
scanning engine and the virus pattern files. Delete all Temporary and
Temporary Internet Files before running the program.

1. Create a new folder on your Desktop or the C: drive named something
useful like "Sysclean".
2. Go here and download the two parts of the program to that folder:

http://www.trendmicro.com/download/dcs.asp - Sysclean
http://www.trendmicro.com/download/pattern.asp - virus pattern files

The pattern files will be zipped - extract them with your unzipper (like
WinZip) or if you have XP, you can just open the folder. You need to
put the extracted files in the Sysclean folder you made. For a more
automated way to get Sysclean, use Dave Lipman's Sysclean_FE from
http://www.ik-cs.com/got-a-virus.htm .

3. Restart your computer in Safe Mode. Get into Safe Mode by repeatedly
tapping the F8 key as the computer is starting up to get to the proper
menu.
4. Go to the Sysclean folder you made and double-click on sysclean.com.
Start the scan. After the scan is finished, look at the log. You may
need to make a note of where any viruses were found if they were not
able to be removed so you can manually delete them.

Then get and install a full-featured av, update its definitions, and do
a thorough scan in Safe Mode.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User


start up