I've have been having a reoccuring problem and am pulling my hair out trying to figure it out. Everytime I reboot, It takes about 5-7 reboots to start windows then I get the Windows recovered from a serious error msg everytime. Microsoft error report says it's a driver issue. But I can't determine which driver it may be. I suspected the AtiDisplayDrv and disabled it in the MSconfig startup tab but that didn't help. As you will see I use spybot Teatimer to log all events and alot of this crap is foreign to me. These are the ones it logged during the endless reboot loop. 25/12/2006 3:16:32 AM Allowed value "NvCplScan" (new data: "") deleted in System Startup user entry! 25/12/2006 3:16:32 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup user entry! 25/12/2006 3:16:32 AM Allowed value "Trust Cleaner" (new data: "") deleted in System Startup user entry! 25/12/2006 3:16:32 AM Allowed value "NvCplDaemon" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "IntelliType" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "NvCplScan" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "ccApp" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "Symantec NetDriver Monitor" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "ntbs32.exe" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "CARPService" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:32 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:33 AM Allowed value "SoundMan" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:33 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup global entry! 25/12/2006 3:16:33 AM Allowed value "{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" (new data: "") deleted in Global browser toolbar! 25/12/2006 3:16:33 AM Allowed value "Search Page" (new data: "http://www.google.com") changed in Browser page! 25/12/2006 3:16:33 AM Allowed value "Search Page" (new data: "http://www.google.com") changed in Browser page! 25/12/2006 3:16:33 AM Allowed value "Start Page" (new data: "http://www.msn.com") changed in Browser page! 25/12/2006 3:16:33 AM Allowed value "load" (new data: "") deleted in NT startup! 25/12/2006 3:16:33 AM Allowed value "UserInit" (new data: "C:\WINDOWS\system32\Userinit.exe") changed in Winlogon! 25/12/2006 10:50:23 AM Allowed value "MSConfig" (new data: "") deleted in System Startup global entry! 25/12/2006 10:51:24 AM Allowed value "AtiDisplayDrv" (new data: "atidrvxx.exe") added in System Startup user entry! 25/12/2006 10:52:29 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup user entry! 25/12/2006 10:52:57 AM Allowed value "MSConfig" (new data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto") added in System Startup global entry! 25/12/2006 10:55:14 AM Allowed value "NSIS.Library.RegTool.v2" (new data: ""C:\Program Files\BitComet\tools\NSIS.Library.RegTool.v2.{2D53CB02-5C08-4B8A-8CCF-B5B6052A2DD4}.exe" /S") added in System Startup global entry! 25/12/2006 10:55:14 AM Allowed value "Download all links using BitComet" (new data: "") added in Browser menu extension! 25/12/2006 10:55:14 AM Denied value "Download all videos using BitComet" (new data: "") added in Browser menu extension! 25/12/2006 10:55:14 AM Allowed value "Download link using &BitComet" (new data: "") added in Browser menu extension! 25/12/2006 11:09:53 AM Allowed value "NvCplScan" (new data: "") deleted in System Startup user entry! 25/12/2006 11:09:53 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup user entry! 25/12/2006 11:09:53 AM Allowed value "Trust Cleaner" (new data: "") deleted in System Startup user entry! 25/12/2006 11:09:53 AM Allowed value "NvCplDaemon" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "IntelliType" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "NvCplScan" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "ccApp" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "Symantec NetDriver Monitor" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "ntbs32.exe" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "CARPService" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "SoundMan" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:53 AM Allowed value "AtiDisplayDrv" (new data: "") deleted in System Startup global entry! 25/12/2006 11:09:54 AM Allowed value "{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" (new data: "") deleted in Global browser toolbar! 25/12/2006 11:09:54 AM Allowed value "Search Page" (new data: "http://www.google.com") changed in Browser page! 25/12/2006 11:09:54 AM Allowed value "Search Page" (new data: "http://www.google.com") changed in Browser page! 25/12/2006 11:09:54 AM Allowed value "Start Page" (new data: "http://www.msn.com") changed in Browser page! 25/12/2006 11:09:54 AM Allowed value "load" (new data: "") deleted in NT startup! 25/12/2006 11:09:54 AM Allowed value "UserInit" (new data: "C:\WINDOWS\system32\Userinit.exe") changed in Winlogon! 25/12/2006 11:09:54 AM Allowed value "BootExecute" (new data: "") deleted in Session manager! 25/12/2006 11:09:54 AM Allowed value "ExcludeFromKnownDlls" (new data: "") deleted in Session manager! 25/12/2006 11:12:15 AM Allowed value "AtiDisplayDrv" (new data: "atidrvxx.exe") added in System Startup user entry! 25/12/2006 11:12:21 AM Allowed value "MSConfig" (new data: "") deleted in System Startup global entry! 25/12/2006 11:12:26 AM Allowed value "KernelFaultCheck" (new data: "") deleted in System Startup global entry! I also though it might have been spyware or a virus but have run numerous scans and removed anything suspicious. If anyone can help me with this problem, I would really like to solve it. Charles
Hello judan The first line and others,"Allowed value "NvCplScan" (new data: "") deleted in System Startup user entry! This is maleware, or a possible worm, and it attempts to delete registry data. Have you got a backup of your registry? Have you tried ccleaner to make sure the maleware is gone. Some of your values relate to global entry and with the text above I am sure some of your registry has been corrupted or deleted. A a last resort If you can backup what you can and reinstall the operating system as a last resort. Before you do make sure you reformat the hard disk. Try ccleaner first. As far as I know this kind of maleware can delete system dlls. Try downloading bitdefender you can use it free for 30 days it might get rid of any remaining worm or maleware. I hope this helps.
Thanks Zenon003, I did run those programs and got rid of a load of crap but was unable to restart windows for a good hour, however, once It finally started up, I disabled all my sound device drivers on a hunch and rebooted immediately with no problems for the first time in months! So now I know it's a driver related issue. I didn't try to restart repeatedly but hopefully this will solve my problems for the time being. Cheers and Happy New Year!
