Fixing a startup driver error

Jason Sullivan

Posts: 32   +0
First off, I'm not sure I'm posting this in the right forum. Please no hard feelings, wasn't sure what topic to post it under.
I'm fixing a computer for a friend and I had removed AVG antivirus from their computer due to them have (2) anti-virus programs running at the same time.. The Resident AV is Microsoft Security Essentials. In doing so, I have come across the problem of the computer hanging up upon startup. Sometimes it will start without a problem, other times it will freeze.. may get a BSOD, may not. Always during startup though I can see in the even viewer there there is an error with a driver remaining with AVG anti-virus. Error in viewer is: Service Control Manager

The following boot-start or system-start driver(s) failed to load:

AVGIDSHX

i8042prt

I have searched some on the net and cannot seem to remove the driver myself. If anyone can give me some tips to remove this said driver or file so that the computer will start normally again, I would really appreciate it.

Thanks
 
"i8042prt" This is a keyboard/mouse driver. Is this a laptop? Did AVG uninstall properly and completely?
 
No this is a desktop PC. I have a plain logitec usb keyboard and mouse attached to the computer. And yes I uninstalled avg from the add remove programs menu.
 
Yes it only happens occasionally.

Sorry for the slow replies im at work all weekend. I already had it uninstalled before posting this thread
 
The computer may be infected with malware:
AVGIDSHX
IDS Application Activity Monitor Helper Driver. You uninstalled AVG, but this is part of AVG still being flagged by Windows. Can you do a "clean" fresh install of Windows?
 
No. There is too much pics/ info/ programs to back up without getting an external hard drive. Also the pc isnt mine so that would be an extreme decision. That is an obvious fix but a last resort.

Please dont close the thread if I dont answer you back quickly. Like I said earlier I have work all weekend so my time to run logs and such is very limited. Thanks for your time and patience
 
You can try AVG uninstaller. I had the same problem on a computer a while back when I removed AVG. The computer kept blue screening, You can get it at. www.avg.com/us-en/utilities It work for me. It may or may not. Can 't hurt to try.
 
Yeah, I'm such a fan of doing a fresh install of Windows. There are so many that don't back up important data regularly. Now days it is so easy to do...
 
No Malware
Malwarebytes LOG:

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org
Database version: v2012.10.21.01
Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Scott :: SCOTT-PC [administrator]
10/20/2012 9:10:14 PM
mbam-log-2012-10-20 (21-10-14).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 208389
Time elapsed: 6 minute(s), 1 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
 
Yes, that seemed to help. I also ran the cleaner and computer seams to be running much better in terms of speed honestly. I still see a service controll error in the Events viewer though. {i8042prt} is the driver error still.. You said earlier that it was due to a keyboard or mouse issue. I only have a Logitec keyboard and mouse connected to the computer though. They didn't come with any type of driver software. Unless windows failed to load drivers for them maybe??
 
I don't see the AVG driver error in the Events log. I restarted the computer several times and no BSOD. I would still like to get rid of the error I just mentioned above though if possible. Not sure if there is a fix for it though
 
If you are running a USB keyboard . You will get this error if your PS2 port is still active. It really will not hurt anything, My old computer had it from the day it was new, Because I did not use that port, So what I did here not to long a go was go in the Bios and disable My PS2 ports. After that I never got that error again . You may or may not be able to do this depends On what type Bios you have and what make of computer, Home build or Retail. There are other ways threw the windows registry, But I really don't remember them off hand. If you click on the error It should show you a link from Microsoft they may help you out with a solution. Or Maybe TMagic will know one.
 
Yes quite a few to be honest.. I will let you know what they are once I get home from work tonight. Thanks for the help so far.
 
So in the device manager the was one exclamation point for an old 56k modem. I tried to update the driver and it was unsuccessful. I then tried to go online and search for a driver via name of the modem and the computer BSOD'ed on me.. NOOOOO. So now I thought that we may have had everything fixed but alas we did not.
Under network adapters :
isatap.{9e298896-CA27-4494-8D76-DF4C5B537147}

The other netword adapter is Realtek RTL8168C/8111C, but that is working properly.. Now I'm not sure if that was the cause of the crash or not, so I disabled it. Here is the error in event log:

Log Name: System
Source: EventLog
Date: 10/21/2012 8:55:21 PM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Scott-PC
Description:
The previous system shutdown at 8:52:13 PM on 10/21/2012 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-10-22T00:55:21.000Z" />
<EventRecordID>184244</EventRecordID>
<Channel>System</Channel>
<Computer>Scott-PC</Computer>
<Security />
</System>
<EventData>
<Data>8:52:13 PM</Data>
<Data>10/21/2012</Data>
<Data>
</Data>
<Data>
</Data>
<Data>375</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DC070A0000001500140034000D009401DC070A0001001600000034000D009401600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>

Any Idea's? And I don't have work at all till friday so I'm free good to go full boar.

Also Second Error in the same time frame.

Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 10/21/2012 8:55:26 PM
Event ID: 1101
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: Scott-PC
Description:
Audit events have been dropped by the transport. The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2012-10-22T00:55:26.313Z" />
<EventRecordID>51004</EventRecordID>
<Correlation />
<Execution ProcessID="1068" ThreadID="1852" />
<Channel>Security</Channel>
<Computer>Scott-PC</Computer>
<Security />
</System>
<UserData>
<AuditEventsDropped xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Reason>34</Reason>
</AuditEventsDropped>
</UserData>
</Event>
 
Wow And another BSOD:







Problem signature:

Problem Event Name: BlueScreen

OS Version: 6.0.6002.2.2.0.768.3

Locale ID: 1033
Additional information about the problem:

BCCode: a

BCP1: FFFFFFF4

BCP2: 00000002

BCP3: 00000000

BCP4: 8244D9CC

OS Version: 6_0_6002

Service Pack: 2_0

Product: 768_1
Files that help describe the problem:

C:\WINDOWS\Minidump\Mini102212-01.dmp

C:\Users\Scott\AppData\Local\temp\WER-56238-0.sysdata.xml

C:\Users\Scott\AppData\Local\temp\WER7DC6.tmp.version.txt
Read our privacy statement:


http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409
 
Back