51 replies to this topic

[Doug]

Sorry to hear about the lost screws. Bummer.

That CD/DVD RW is a replaceable item.
I have no idea what the cost is, or if it may be covered by warranty.

You can view the part and description, here:
http://h20000.www2.h...02/bph08402.pdf
________

You may get some information from HP about your specific machine, here:
http://h50203.www5.h...r...=us&lang=en
__________

Please just complete your work in Malware removal at this time.
Then we can see how the machine is running at that point, and address any additional concerns.



Best Regards

[ed3000gt]

it is 4 yrs old. and was refurbished from HP. no warranty here. don't know about after market one.. how hard to install or anything like that.. is there a way to read .pdf files without installing the whole adobe reader?

[Doug]

how hard to install or anything like that..

I have no idea, but the HP schematics look fairly complete as guidlelines.
Often you can get experienced help from HP online and HP owner Forums.

We still don't know if that entire machine is going to come back to life again or not after Malware Removal.
Then we have some additional steps with Disk and File utilities to see if there are any operating system snags preventing the reading of the optical drive.
Don't give up yet.
But don't get wild expectations either.
______________

Best .pdf file reader is Foxit.
http://www.foxitsoft....com/downloads/

It's only about 1.5mb installed!

Best Regards

Edited by dough, 06 April 2007 - 09:06 PM.

[ed3000gt]

I think LDTate is done with me on the malware portion.. what is the next step? EDIT: re-ran the PCPitstop and still getting same errors as before...

Edited by ed3000gt, 06 April 2007 - 09:26 PM.

[Doug]

Just finished reading your work with LDT. Nicely done! Next Step: CHECKDISK will scan your Hard Drive for structure, examining for bad-clusters where operating system and application files may be faulty. CheckDisk will identify bad-sectors, attempt to read the file or data at that location, and if not possible, will copy original required information from other locations in the operating system. To Run CHECKDISK, goto: Start - Run - (type)chkdsk /f /r - Enter You will receive a warning that CHECKDISK cannot be run because it cannot lock the drive (files are in use), And you will be asked if you wish to allow chkdsk /f /r to run when you re-start your machine. - Yes Agree to allow CHECKDISK to run at re-boot and then reboot your system. CHECKDISK will initiate its scan (five parts) and display progress of each scan. This can take anywhere from 20 minutes to an hour, depending upon the size of your hard drive. I recently ran chkdsk /f /r on a laptop with 40gb hard drive. It took about 20 minutes. CHECKDISK does not give you a print-out report, nor does it wait for your instructions before initiating the boot sequence to Normal Mode Windows. It is RECOMMENDED that you "watch" the process, noticing when chkdsk identifies bad-cluster/bad-sector and moves files. At the very end of the 5th scan, CHECKDISK will write a status report to your Monitor stating the size and condition of your Hard Drive. It will include a line: CHECKDISK MOVED/COPIED FILES if it did identify any bad-cluster data. This report "goes by" pretty fast, so you need to be watching for it. It is important to REPEAT running chkdsk /f /r as many times as required for it to complete the 5 scans without identifying any new bad-clusters and without moving/copying any files. Then run chkdsk /f /r one more time to assure that you have a "structurally sound" hard drive. Next: After completing the above routine with CHECKDISK.... Now we will be looking for any "System Errors" in the Operating System. CHECKDISK made sure that the Disk Structure is sound. Now we will be examining the File Structure. to do this we will be using Windows File Protection System File Checker To run System File Checker, goto: Start - Run - (type)sfc /scannow - enter A DOS-like frame will open briefly then disappear. Then the Windows File Protection "Progress Bar" will appear, indicating the progress of the scan. If there are any "missing or corrupt" system files, SFC will call for your XP installation CD, in order to copy/paste the original correct system file. Do you have the XP installation CD? If not, you can use the XP SP2 CD, if you have one. Or you can borrow an XP installation CD of the same type as the system on your machine - Home or Pro. There are some other "workarounds" if the above requirement for a CD cause difficulty. Let us know if you have the XP installation CD, and if not, start thinking about who you might borrow one from. Best Regards

[ed3000gt]

hey dough.. I did the checkdisk 3 times in a row.. and kept getting this... CHKDSK is verifying file data (stage 4 of 5)... Windows replaced bad clusters in file 38824 of name \DOCUME~2\OWNER~1.MAN\LOCALS~1\APPLIC~1\MICROS~1\MESSEN~1\ED_300~1.COM\SHARIN~2\Working\SIMILA~2. I just gave up and did the "sfc /scannow" and everything went all the way just fine. anything I sould do? EDIT: All I have is a set of 6 cds for HP Restore.

Edited by ed3000gt, 07 April 2007 - 01:09 PM.

[ed3000gt]

PS: still getting same errors with pcpitstop.

[Doug]

Other than the PCPitstop error message, how is your machine running at this time?

I will be investigating the error message at the Pit with an Administrator there, and will report back to you with any information.

Since you seem to have been back to run another Pit Test, please post the Fresh TechExpress Results link so we can take a look at any other items to address.

Best Regards

Edit: The file that is being identified in CHECKDISK appears to be a "spam message" transmitted via NetBios through an exploit to the Windows Messenger (not related to any IM messenger) (Windows messenger is used by Administrators and MS to transmit Error message reporsts, but can be exploited by the bad-guys to spam you)

Therefore, Turn off the Messenger Service:

turn off the Messenger service. To do this, follow these steps:

1. Click Start, and then click Control Panel (or point to Settings, and then click Control Panel).
2. Double-click Administrative Tools.
3. Double-click Services.
4. Double-click Messenger.
5. In the Startup type list, click Disabled.
6. Click Stop, and then click OK.

___________

You should still continue to run chkdsk /f /r. It may only identify and move one bad-cluster at a time, and then find the next one in the next run of chkdsk /f /r.

I realize that this process can be tedious, but you can set it to run and then walk away, allowing it to complete, as long as you monitor the "last" time that you run it, to assure that no further bad-clusters are being identified.

Edited by dough, 07 April 2007 - 03:34 PM.

[ed3000gt]

It is already disabled... and didn't have to stop it.. I try to keep start up as ligh as possible. just the needed stuff a let start.

________

You may get some information from HP about your specific machine, here:
http://h50203.www5.h...r...=us&lang=en
__________


having trouble to access this link.

Edited by ed3000gt, 07 April 2007 - 04:34 PM.

[ed3000gt]

finally was able to do the HP testing.. these are the results. PS: why is it asking me to update my norton if I don't have it? is it some sort of leftover files? is there a way to remove them? Device detected Name ED Model HP NoteBook PC Serial number CN24902558 » Active chat Our support experts are available to assist you with any questions. » Operating Hours System Health Scan » Hardware Diagnostics » Advanced Diagnostics Please do not click the browser refresh button while viewing this page. The system health scan is complete. Listed below is a report of issues detected on your system. Critical issues The version of Symantec Antivirus software installed on your computer may experience problems with Windows XP. HP recommends performing a Symantec Liveupdate, or upgrading your Symantec Antivirus software to a the latest version. » More information Symptom:Under rare conditions your computer may stop responding or hang during normal use. A bluescreen error may appear. [ SUPPORT COMMUNICATION - CUSTOMER ADVISORY Document ID: c00584500 Version: 1 HP Notebook PCs - Blue Screen or Serious Error Occurs Referring to SAVRT.SYS NOTICE: The information in this document, including products and software versions, is current as of the Release Date. This document is subject to change without notice. Release Date: 2005-12-19 Last Updated: 2006-05-25 -------------------------------------------------------------------------------- DESCRIPTION A blue screen or Serious Error may appear referring to the file SAVRT.SYS with a stop code of 0x8e or 1000008E. SCOPE The specific notebook PCs affected by this issue are listed in the Hardware Platforms Affected section at the bottom of this advisory. RESOLUTION To prevent the error from appearing upgrade your version of Symantec antivirus software to version 9.4.4.1 or later using LiveUpdate. For more information on using LiveUpdate see HP and Comqaq PCs - Using Symantec Norton Antivirus. ] -------------------------------------------------------------------------------- Suggestions for optimizing You can significantly improve your PC performance by upgrading its memory. » More information -------------------------------------------------------------------------------- NEC PCI to USB Open Host Controller: Device has a problem » More information [This device is either not present, not working properly, or does not have all the drivers installed. To resolve this error code, make sure the device is connected to the computer correctly. For example, make sure all cables are plugged in fully and that all adapter cards are properly seated. It may be possible to remove the device and redetect it using the Add New Hardware wizard. ] -------------------------------------------------------------------------------- mrtRate: Device has a problem » More information [This device is either not present, not working properly, or does not have all the drivers installed. Make sure the device is connected to your computer correctly. For example, make sure all cables are correctly installed, or that the adapter cards are properly seated in their slots. If that does not help, try updating the driver for that device from the Device Manager or try to re-detect the hardware. ] -------------------------------------------------------------------------------- To test the individual hardware components in your device, proceed to the hardware diagnostics. Results from hardware component diagnostic(s) Legend = Critical = Warning = OK -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Processor Test. » More information (Code=256) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Mouse Test. » More information (Code=3328) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Parallel Port Test. » More information (Code=4864) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Monitor Test. » More information (Code=3840) -------------------------------------------------------------------------------- Test Passed. No fails were detected in the LAN Test. » More information (Code=2816) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the PCI Test(s). » More information (Code=1536) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Memory Test. » More information (Code=512) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the serial port(s). » More information (Code=5120) -------------------------------------------------------------------------------- Test Failed. No CD found the CD-ROM drive. Please insert a non copy protected CD-ROM disk in the drive. (CD-ROM diagnostic (D:)) » More information (Code=1031) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the USB Test(s). » More information (Code=1792) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Audio Test. » More information (Code=4608) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Microphone Test(s). » More information (Code=4352) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Keyboard Test. » More information (Code=3072) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Parallel Port Test. » More information (Code=4864) -------------------------------------------------------------------------------- Test Passed. No fails were detected in the Hard Disk Drive Test. » More information (Code=2560) -------------------------------------------------------------------------------- Test Passed. No failures were detected in the Video Test(s). » More information (Code=3584) -------------------------------------------------------------------------------- Test Passed. No failure was detected in the modem test. » More information (Code=4096)

Edited by ed3000gt, 07 April 2007 - 07:18 PM.

[Doug]

Hi ed3000gt,

PS: why is it asking me to update my norton if I don't have it?
is it some sort of leftover files? is there a way to remove them?

You appear to have some "remnants" of Symantec products still referenced in your file structure.

C:\PROGRA~1\Symantec\S32EVNT1.DLL

I have not yet determined a "best solution" for this situation, but have posted two inquiries with administrators at other sites in hopes of shedding more light on the issue.

Please be patient.
And please do not "take action" until we get more information.

If you decide to "google" for information about this item, please be aware that "some" of the links will suggest rather radical solutions which may actually precipitate having "more" references to Symantec instead of less.

That's why I'm asking you to be patient and not take action until we get more information.
_______

Best Regards

[ed3000gt]

dough, I trust you, so I won't be doing anything without contacting you. Thanks for all the help so far.

[Doug]

Hi ed3000gt,

Regarding the Error Message from your Pit Test,
Norton creates conflicts with a variety of other utilities, including the Pit Test.
The Administrators have been aware of this problem for quite some time now and have not as yet come up with a remedy.
The "conflicts" affect very few machines. Actually, yours is the first one that I've identified.
It is remarkable that your machine was able to complete the Pit Test.

This is most likely caused by the "remnants" of Symantec remaining on your machine after you uninstalled it.
Have you used the Norton Uninstall Tool? If not, download it here:
http://service1.syma...005033108162039

(download the version for Windows Vista/XP/2000.
_______

I am not convinced that the Norton Uninstall Tool will help you at this point, but it will not harm your machine.
We may have to do some "manual" removal steps after you complete the Norton Uninstall Tool steps.
_________

Regarding your QSI CDRW/DVD --

Your problem is almost certainly related to hardware failure. Sorry.
Most likely the unit itself has failed.
Possibly the power or the IDE connectors are somehow not completely seated.
Possibly Removal and Reinstallation of your Drivers could remedy the situation.

You can repeat your prior steps in Device Manager of Removing the CD-ROM driver and then Reboot to allow Windows to "find new hardware" and "install drivers for new hardware".

I presume that you manually opened the CD-Tray and placed a known-good readable/writeable CD into the Tray during your HP Test ???
_________

I've investigated a number of avenues for using External USB CD-RW units for Operating System installation.
Remarkably, there are some resources available.
However, they are "somewhat" advanced procedures, that may be difficult for an owner/user with average computer skills.

At this time, I will encourage you to consider "other alternatives".

--- 1. Instead of doing a full System Restore, requiring procedures from your six Recovery CD's, It is possible that we can make improvements in your machine's functionality using other steps.
In fact, I would imagine that your machine is "already" functioning much better than when you first posted.

--- 2. Consider purchasing and replacing the CD Unit in your Laptop. Having that device replaced and that function available to your machine will be useful in many future situation.

--- 3. Browse you machine's BIOS/CMOS Setup to see if there just happens to be an option to Boot from External/USB Device. Let us know if that option appears, but do not make any changed until replying back with the information.

--- 4. Let us know if you wish to learn how to attempt System Recovery via your External CD unit.
There is quite a lot of research and learning to do prior to attempting to set your machine to "Boot" from an external CD Unit. But it is possible.
__________

So, what should you do at this time?

1. Run the Norton Removal Tool.
2. Report back your results.

(We can then give you specific recommendations for items in your File Structure to possibly delete to fully rid your machine of Norton)

3. Run a fresh PCPitstop Full Test and post the TechExpress, so that we can give you additional recommendations for improving the performance of your machine without doing a full System Recovery Reinstallation.

Best Regards

[ed3000gt]

used the uninstaller from norton..

went to pitstop and tryed another run.. no luck.. still got the same errors...

what if I copied that .dll and placed in my computer somewherer? might be needed, that the reason for the error. because I have searched the computer for it, and nothing has come up.

the one thing I don't understand is why the scan shutting down halfway. giving me trouble with the pcpitstop.dll. is not like I have a ton of things running at the same time..

I guess this is as good as it gets..

TechExpress link for your current results:
http://www.pcpitstop...KNMFWNVMAWSA06W

Thanks dough.


PS: i'm sorry for the mcafee removal tool.

Attached Thumbnails

• 

Edited by ed3000gt, 10 April 2007 - 04:19 PM.

[ed3000gt]

http://entkb.symante...2516423148.html

just found this at google. should I try?