Missing boot-start driver bthex.dll

[richard]

(This may be repeated....if so, sorry!)When I start my computer (with
Win XP Home SP3 installed), just after the BIOS info screen and before
Windows even kicks in, I get a white progress bar at the bottom of the
screen that fills up over about 20 minutes before the usual Windows
logo/start screen appears. Looking at the event viewer for the System I
find that "boot-start or system-start driver "bthex" was not found.
Looking in the Registry indicates that bthex is expected to be found in
Win\System32\Drivers. It is not there, so something has suddenly
deleted\renamed it or something. I have put my installation DVD in the
drive and tried a repair but this driver cannot be located there, and I
have googled for it but with no luck. Can anyone suggest where I might
find this system file, or maybe even search for it on their own Syste32
folder and make it available to me?? Many thanks for any help in advance.
Richard

[john john - mvp]

Multi-posted.

See your other post in another group for possible answers. In the
future instead of multi-posting please cross-post.

Multiposting vs Crossposting
http://www.blakjak.demon.co.uk/mul_crss.htm

John

Richard wrote:
> (This may be repeated....if so, sorry!)When I start my computer (with
> Win XP Home SP3 installed), just after the BIOS info screen and before
> Windows even kicks in, I get a white progress bar at the bottom of the
> screen that fills up over about 20 minutes before the usual Windows
> logo/start screen appears. Looking at the event viewer for the System I
> find that "boot-start or system-start driver "bthex" was not found.
> Looking in the Registry indicates that bthex is expected to be found in
> Win\System32\Drivers. It is not there, so something has suddenly
> deleted\renamed it or something. I have put my installation DVD in the
> drive and tried a repair but this driver cannot be located there, and I
> have googled for it but with no luck. Can anyone suggest where I might
> find this system file, or maybe even search for it on their own Syste32
> folder and make it available to me?? Many thanks for any help in advance.
> Richard

[richard]

On 24/06/2010 13:24, John John - MVP wrote:
>
> Multi-posted.
>
> See your other post in another group for possible answers. In the future
> instead of multi-posting please cross-post.
>
> Multiposting vs Crossposting
> http://www.blakjak.demon.co.uk/mul_crss.htm
>
> John
>
> Richard wrote:
>> (This may be repeated....if so, sorry!)When I start my computer (with
>> Win XP Home SP3 installed), just after the BIOS info screen and before
>> Windows even kicks in, I get a white progress bar at the bottom of the
>> screen that fills up over about 20 minutes before the usual Windows
>> logo/start screen appears. Looking at the event viewer for the System
>> I find that "boot-start or system-start driver "bthex" was not found.
>> Looking in the Registry indicates that bthex is expected to be found
>> in Win\System32\Drivers. It is not there, so something has suddenly
>> deleted\renamed it or something. I have put my installation DVD in the
>> drive and tried a repair but this driver cannot be located there, and
>> I have googled for it but with no luck. Can anyone suggest where I
>> might find this system file, or maybe even search for it on their own
>> Syste32 folder and make it available to me?? Many thanks for any help
>> in advance.
>> Richard
Will do....did not know the difference!
Richard

[richard]

(This may be repeated....if so, sorry!)When I start my computer (with
Win XP Home SP3 installed), just after the BIOS info screen and before
Windows even kicks in, I get a white progress bar at the bottom of the
screen that fills up over about 20 minutes before the usual Windows
logo/start screen appears. Looking at the event viewer for the System I
find that "boot-start or system-start driver "bthex" was not found.
Looking in the Registry indicates that bthex is expected to be found in
Win\System32\Drivers. It is not there, so something has suddenly
deleted\renamed it or something. I have put my installation DVD in the
drive and tried a repair but this driver cannot be located there, and I
have googled for it but with no luck. Can anyone suggest where I might
find this system file, or maybe even search for it on their own Syste32
folder and make it available to me?? Many thanks for any help in advance.
Richard

[john john - mvp]

Richard wrote:
> (This may be repeated....if so, sorry!)When I start my computer (with
> Win XP Home SP3 installed), just after the BIOS info screen and before
> Windows even kicks in, I get a white progress bar at the bottom of the
> screen that fills up over about 20 minutes before the usual Windows
> logo/start screen appears. Looking at the event viewer for the System I
> find that "boot-start or system-start driver "bthex" was not found.
> Looking in the Registry indicates that bthex is expected to be found in
> Win\System32\Drivers. It is not there, so something has suddenly
> deleted\renamed it or something. I have put my installation DVD in the
> drive and tried a repair but this driver cannot be located there, and I
> have googled for it but with no luck. Can anyone suggest where I might
> find this system file, or maybe even search for it on their own Syste32
> folder and make it available to me?? Many thanks for any help in advance.

If it's a driver it would be a .sys file (not a .dll). A search for
this file yields no results, often an indication that the file is virus
or malware related. I would suggest that you make sure that the machine
is free of any pests.

Where *exactly* in the registry did you find reference to this file? It
could be that your Anti-Virus tools have removed an infection and that
the entry is just a remnant.

John

[richard]

On 24/06/2010 13:20, John John - MVP wrote:
> Richard wrote:
>> (This may be repeated....if so, sorry!)When I start my computer (with
>> Win XP Home SP3 installed), just after the BIOS info screen and before
>> Windows even kicks in, I get a white progress bar at the bottom of the
>> screen that fills up over about 20 minutes before the usual Windows
>> logo/start screen appears. Looking at the event viewer for the System
>> I find that "boot-start or system-start driver "bthex" was not found.
>> Looking in the Registry indicates that bthex is expected to be found
>> in Win\System32\Drivers. It is not there, so something has suddenly
>> deleted\renamed it or something. I have put my installation DVD in the
>> drive and tried a repair but this driver cannot be located there, and
>> I have googled for it but with no luck. Can anyone suggest where I
>> might find this system file, or maybe even search for it on their own
>> Syste32 folder and make it available to me?? Many thanks for any help
>> in advance.
>
> If it's a driver it would be a .sys file (not a .dll). A search for this
> file yields no results, often an indication that the file is virus or
> malware related. I would suggest that you make sure that the machine is
> free of any pests.
>
> Where *exactly* in the registry did you find reference to this file? It
> could be that your Anti-Virus tools have removed an infection and that
> the entry is just a remnant.
>
> John
Hi John, I think it is a .sys file. I have run Anti MalwareBytes
AntiMalware, SuperAntiSpyware and Kaspersky's Virus Removal Tool. The
first two indicate no problems, but Kaspersky *DID* identify some
threats and *DID* remove them. If it was as you suggest the remnant of
an infection,why would my boot-start continue for so long to look for
it, and how can I tell it not to, and get my boot time back to
acceptable levels? 25 mins is just too long especially when reboots are
being asked for by other (OK) programs. Thanks for your help.
Richard

[richard]

On 24/06/2010 13:20, John John - MVP wrote:
> Richard wrote:
>> (This may be repeated....if so, sorry!)When I start my computer (with
>> Win XP Home SP3 installed), just after the BIOS info screen and before
>> Windows even kicks in, I get a white progress bar at the bottom of the
>> screen that fills up over about 20 minutes before the usual Windows
>> logo/start screen appears. Looking at the event viewer for the System
>> I find that "boot-start or system-start driver "bthex" was not found.
>> Looking in the Registry indicates that bthex is expected to be found
>> in Win\System32\Drivers. It is not there, so something has suddenly
>> deleted\renamed it or something. I have put my installation DVD in the
>> drive and tried a repair but this driver cannot be located there, and
>> I have googled for it but with no luck. Can anyone suggest where I
>> might find this system file, or maybe even search for it on their own
>> Syste32 folder and make it available to me?? Many thanks for any help
>> in advance.
>
> If it's a driver it would be a .sys file (not a .dll). A search for this
> file yields no results, often an indication that the file is virus or
> malware related. I would suggest that you make sure that the machine is
> free of any pests.
>
> Where *exactly* in the registry did you find reference to this file? It
> could be that your Anti-Virus tools have removed an infection and that
> the entry is just a remnant.
>
> John
Appears at HKLM/System/ControlSet001(and
003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which I
am not allowed to edit: also at ditto\controlset001 (and
3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
references, could that help??

[john john - mvp]

Richard wrote:
> On 24/06/2010 13:20, John John - MVP wrote:
>> Richard wrote:
>>> (This may be repeated....if so, sorry!)When I start my computer (with
>>> Win XP Home SP3 installed), just after the BIOS info screen and before
>>> Windows even kicks in, I get a white progress bar at the bottom of the
>>> screen that fills up over about 20 minutes before the usual Windows
>>> logo/start screen appears. Looking at the event viewer for the System
>>> I find that "boot-start or system-start driver "bthex" was not found.
>>> Looking in the Registry indicates that bthex is expected to be found
>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>> deleted\renamed it or something. I have put my installation DVD in the
>>> drive and tried a repair but this driver cannot be located there, and
>>> I have googled for it but with no luck. Can anyone suggest where I
>>> might find this system file, or maybe even search for it on their own
>>> Syste32 folder and make it available to me?? Many thanks for any help
>>> in advance.
>>
>> If it's a driver it would be a .sys file (not a .dll). A search for this
>> file yields no results, often an indication that the file is virus or
>> malware related. I would suggest that you make sure that the machine is
>> free of any pests.
>>
>> Where *exactly* in the registry did you find reference to this file? It
>> could be that your Anti-Virus tools have removed an infection and that
>> the entry is just a remnant.
>>
>> John
> Appears at HKLM/System/ControlSet001(and
> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which I
> am not allowed to edit: also at ditto\controlset001 (and
> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
> references, could that help??

Is it in the CurrentControlSet?

Look for phantom devices in the Device Manager and see if any make
mention this BTHEX driver:

Device Manager does not display devices that are not connected to the
Windows XP-based computer
http://support.microsoft.com/kb/315539

This little batch file will automatically set the Device Manager to show
phantom devices and open it for you:

----------------------------------------------------
set devmgr_show_nonpresent_devices-1
start devmgmt.msc
----------------------------------------------------

You cannot delete the keys in the Enum section because you do not have
permission to do so, grant yourself the necessary permissions and you
will be able to remove the keys. Before you do that keep in mind that
there is a good reason why only the System account has permission to
delete keys in the in the \Enum branch! It would be best to remove the
device in the Device Manager instead of removing it from the Enum keys.

Before you change the permissions and delete keys please read the
following:

Enum
http://technet.microsoft.com/en-ca/libr ... 76176.aspx

System and Startup Settings
http://technet.microsoft.com/en-us/libr ... 42541.aspx

HKEY_LOCAL_MACHINE\SYSTEM\Select
http://technet.microsoft.com/en-ca/libr ... 78528.aspx

John

[richard]

On 24/06/2010 14:13, John John - MVP wrote:
> Richard wrote:
>> On 24/06/2010 13:20, John John - MVP wrote:
>>> Richard wrote:
>>>> (This may be repeated....if so, sorry!)When I start my computer (with
>>>> Win XP Home SP3 installed), just after the BIOS info screen and before
>>>> Windows even kicks in, I get a white progress bar at the bottom of the
>>>> screen that fills up over about 20 minutes before the usual Windows
>>>> logo/start screen appears. Looking at the event viewer for the System
>>>> I find that "boot-start or system-start driver "bthex" was not found.
>>>> Looking in the Registry indicates that bthex is expected to be found
>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>> deleted\renamed it or something. I have put my installation DVD in the
>>>> drive and tried a repair but this driver cannot be located there, and
>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>> might find this system file, or maybe even search for it on their own
>>>> Syste32 folder and make it available to me?? Many thanks for any help
>>>> in advance.
>>>
>>> If it's a driver it would be a .sys file (not a .dll). A search for this
>>> file yields no results, often an indication that the file is virus or
>>> malware related. I would suggest that you make sure that the machine is
>>> free of any pests.
>>>
>>> Where *exactly* in the registry did you find reference to this file? It
>>> could be that your Anti-Virus tools have removed an infection and that
>>> the entry is just a remnant.
>>>
>>> John
>> Appears at HKLM/System/ControlSet001(and
>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>> I am not allowed to edit: also at ditto\controlset001 (and
>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>> references, could that help??
>
> Is it in the CurrentControlSet?
>
> Look for phantom devices in the Device Manager and see if any make
> mention this BTHEX driver:
>
> Device Manager does not display devices that are not connected to the
> Windows XP-based computer
> http://support.microsoft.com/kb/315539
>
> This little batch file will automatically set the Device Manager to show
> phantom devices and open it for you:
>
> ----------------------------------------------------
> set devmgr_show_nonpresent_devices-1
> start devmgmt.msc
> ----------------------------------------------------
>
> You cannot delete the keys in the Enum section because you do not have
> permission to do so, grant yourself the necessary permissions and you
> will be able to remove the keys. Before you do that keep in mind that
> there is a good reason why only the System account has permission to
> delete keys in the in the \Enum branch! It would be best to remove the
> device in the Device Manager instead of removing it from the Enum keys.
>
> Before you change the permissions and delete keys please read the
> following:
>
> Enum
> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>
> System and Startup Settings
> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>
> HKEY_LOCAL_MACHINE\SYSTEM\Select
> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>
> John
Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. No
mention in Device Manager, or after running your batch file. I won't try
to meddle with Enum, but how do I grant myself permission if I did want
to?? I will read the articles you mention, but since this is the file
that is causing my 20 min startup delay, ex-infection or otherwise - how
do I get rid of my system searching for it?? Thanks again.
Richard

[john john - mvp]

Richard wrote:
> On 24/06/2010 14:13, John John - MVP wrote:
>> Richard wrote:
>>> On 24/06/2010 13:20, John John - MVP wrote:
>>>> Richard wrote:
>>>>> (This may be repeated....if so, sorry!)When I start my computer (with
>>>>> Win XP Home SP3 installed), just after the BIOS info screen and before
>>>>> Windows even kicks in, I get a white progress bar at the bottom of the
>>>>> screen that fills up over about 20 minutes before the usual Windows
>>>>> logo/start screen appears. Looking at the event viewer for the System
>>>>> I find that "boot-start or system-start driver "bthex" was not found.
>>>>> Looking in the Registry indicates that bthex is expected to be found
>>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>>> deleted\renamed it or something. I have put my installation DVD in the
>>>>> drive and tried a repair but this driver cannot be located there, and
>>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>>> might find this system file, or maybe even search for it on their own
>>>>> Syste32 folder and make it available to me?? Many thanks for any help
>>>>> in advance.
>>>>
>>>> If it's a driver it would be a .sys file (not a .dll). A search for
>>>> this
>>>> file yields no results, often an indication that the file is virus or
>>>> malware related. I would suggest that you make sure that the machine is
>>>> free of any pests.
>>>>
>>>> Where *exactly* in the registry did you find reference to this file? It
>>>> could be that your Anti-Virus tools have removed an infection and that
>>>> the entry is just a remnant.
>>>>
>>>> John
>>> Appears at HKLM/System/ControlSet001(and
>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>>> I am not allowed to edit: also at ditto\controlset001 (and
>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>>> references, could that help??
>>
>> Is it in the CurrentControlSet?
>>
>> Look for phantom devices in the Device Manager and see if any make
>> mention this BTHEX driver:
>>
>> Device Manager does not display devices that are not connected to the
>> Windows XP-based computer
>> http://support.microsoft.com/kb/315539
>>
>> This little batch file will automatically set the Device Manager to show
>> phantom devices and open it for you:
>>
>> ----------------------------------------------------
>> set devmgr_show_nonpresent_devices-1
>> start devmgmt.msc
>> ----------------------------------------------------
>>
>> You cannot delete the keys in the Enum section because you do not have
>> permission to do so, grant yourself the necessary permissions and you
>> will be able to remove the keys. Before you do that keep in mind that
>> there is a good reason why only the System account has permission to
>> delete keys in the in the \Enum branch! It would be best to remove the
>> device in the Device Manager instead of removing it from the Enum keys.
>>
>> Before you change the permissions and delete keys please read the
>> following:
>>
>> Enum
>> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>>
>> System and Startup Settings
>> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>>
>> HKEY_LOCAL_MACHINE\SYSTEM\Select
>> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>>
>> John
> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000. No
> mention in Device Manager, or after running your batch file. I won't try
> to meddle with Enum, but how do I grant myself permission if I did want
> to?? I will read the articles you mention, but since this is the file
> that is causing my 20 min startup delay, ex-infection or otherwise - how
> do I get rid of my system searching for it?? Thanks again.

The registry permissions are just like regular NTFS file permissions,
just right click on the offending key and select Permissions...

If you are convinced that this is the culprit and if you cannot remove
the device from the Device Manager then just grant yourself full control
on the key and delete it. For the time being remove it in the
CurrentControlSet only! If the Windows installation balks at its
removal (when you reboot) just boot to the Last Known Good Configuration.

John

[john john - mvp]

John John - MVP wrote:
> Richard wrote:
>> On 24/06/2010 14:13, John John - MVP wrote:
>>> Richard wrote:
>>>> On 24/06/2010 13:20, John John - MVP wrote:
>>>>> Richard wrote:
>>>>>> (This may be repeated....if so, sorry!)When I start my computer (with
>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and
>>>>>> before
>>>>>> Windows even kicks in, I get a white progress bar at the bottom of
>>>>>> the
>>>>>> screen that fills up over about 20 minutes before the usual Windows
>>>>>> logo/start screen appears. Looking at the event viewer for the System
>>>>>> I find that "boot-start or system-start driver "bthex" was not found.
>>>>>> Looking in the Registry indicates that bthex is expected to be found
>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>>>> deleted\renamed it or something. I have put my installation DVD in
>>>>>> the
>>>>>> drive and tried a repair but this driver cannot be located there, and
>>>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>>>> might find this system file, or maybe even search for it on their own
>>>>>> Syste32 folder and make it available to me?? Many thanks for any help
>>>>>> in advance.
>>>>>
>>>>> If it's a driver it would be a .sys file (not a .dll). A search for
>>>>> this
>>>>> file yields no results, often an indication that the file is virus or
>>>>> malware related. I would suggest that you make sure that the
>>>>> machine is
>>>>> free of any pests.
>>>>>
>>>>> Where *exactly* in the registry did you find reference to this
>>>>> file? It
>>>>> could be that your Anti-Virus tools have removed an infection and that
>>>>> the entry is just a remnant.
>>>>>
>>>>> John
>>>> Appears at HKLM/System/ControlSet001(and
>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>>>> I am not allowed to edit: also at ditto\controlset001 (and
>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>>>> references, could that help??
>>>
>>> Is it in the CurrentControlSet?
>>>
>>> Look for phantom devices in the Device Manager and see if any make
>>> mention this BTHEX driver:
>>>
>>> Device Manager does not display devices that are not connected to the
>>> Windows XP-based computer
>>> http://support.microsoft.com/kb/315539
>>>
>>> This little batch file will automatically set the Device Manager to show
>>> phantom devices and open it for you:
>>>
>>> ----------------------------------------------------
>>> set devmgr_show_nonpresent_devices-1
>>> start devmgmt.msc
>>> ----------------------------------------------------
>>>
>>> You cannot delete the keys in the Enum section because you do not have
>>> permission to do so, grant yourself the necessary permissions and you
>>> will be able to remove the keys. Before you do that keep in mind that
>>> there is a good reason why only the System account has permission to
>>> delete keys in the in the \Enum branch! It would be best to remove the
>>> device in the Device Manager instead of removing it from the Enum keys.
>>>
>>> Before you change the permissions and delete keys please read the
>>> following:
>>>
>>> Enum
>>> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>>>
>>> System and Startup Settings
>>> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>>>
>>> HKEY_LOCAL_MACHINE\SYSTEM\Select
>>> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>>>
>>> John
>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000.
>> No mention in Device Manager, or after running your batch file. I
>> won't try to meddle with Enum, but how do I grant myself permission if
>> I did want to?? I will read the articles you mention, but since this
>> is the file that is causing my 20 min startup delay, ex-infection or
>> otherwise - how do I get rid of my system searching for it?? Thanks
>> again.
>
> The registry permissions are just like regular NTFS file permissions,
> just right click on the offending key and select Permissions...
>
> If you are convinced that this is the culprit and if you cannot remove
> the device from the Device Manager then just grant yourself full control
> on the key and delete it. For the time being remove it in the
> CurrentControlSet only! If the Windows installation balks at its
> removal (when you reboot) just boot to the Last Known Good Configuration.

PS. The problem is more likely to be caused by the status of the
service in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
branch, I suggest that you remove or disable the service there. To
disable the service set its Start value to 4.

John

[richard]

On 24/06/2010 14:59, John John - MVP wrote:
> Richard wrote:
>> On 24/06/2010 14:13, John John - MVP wrote:
>>> Richard wrote:
>>>> On 24/06/2010 13:20, John John - MVP wrote:
>>>>> Richard wrote:
>>>>>> (This may be repeated....if so, sorry!)When I start my computer (with
>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and
>>>>>> before
>>>>>> Windows even kicks in, I get a white progress bar at the bottom of
>>>>>> the
>>>>>> screen that fills up over about 20 minutes before the usual Windows
>>>>>> logo/start screen appears. Looking at the event viewer for the System
>>>>>> I find that "boot-start or system-start driver "bthex" was not found.
>>>>>> Looking in the Registry indicates that bthex is expected to be found
>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>>>> deleted\renamed it or something. I have put my installation DVD in
>>>>>> the
>>>>>> drive and tried a repair but this driver cannot be located there, and
>>>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>>>> might find this system file, or maybe even search for it on their own
>>>>>> Syste32 folder and make it available to me?? Many thanks for any help
>>>>>> in advance.
>>>>>
>>>>> If it's a driver it would be a .sys file (not a .dll). A search for
>>>>> this
>>>>> file yields no results, often an indication that the file is virus or
>>>>> malware related. I would suggest that you make sure that the
>>>>> machine is
>>>>> free of any pests.
>>>>>
>>>>> Where *exactly* in the registry did you find reference to this
>>>>> file? It
>>>>> could be that your Anti-Virus tools have removed an infection and that
>>>>> the entry is just a remnant.
>>>>>
>>>>> John
>>>> Appears at HKLM/System/ControlSet001(and
>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>>>> I am not allowed to edit: also at ditto\controlset001 (and
>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>>>> references, could that help??
>>>
>>> Is it in the CurrentControlSet?
>>>
>>> Look for phantom devices in the Device Manager and see if any make
>>> mention this BTHEX driver:
>>>
>>> Device Manager does not display devices that are not connected to the
>>> Windows XP-based computer
>>> http://support.microsoft.com/kb/315539
>>>
>>> This little batch file will automatically set the Device Manager to show
>>> phantom devices and open it for you:
>>>
>>> ----------------------------------------------------
>>> set devmgr_show_nonpresent_devices-1
>>> start devmgmt.msc
>>> ----------------------------------------------------
>>>
>>> You cannot delete the keys in the Enum section because you do not have
>>> permission to do so, grant yourself the necessary permissions and you
>>> will be able to remove the keys. Before you do that keep in mind that
>>> there is a good reason why only the System account has permission to
>>> delete keys in the in the \Enum branch! It would be best to remove the
>>> device in the Device Manager instead of removing it from the Enum keys.
>>>
>>> Before you change the permissions and delete keys please read the
>>> following:
>>>
>>> Enum
>>> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>>>
>>> System and Startup Settings
>>> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>>>
>>> HKEY_LOCAL_MACHINE\SYSTEM\Select
>>> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>>>
>>> John
>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000.
>> No mention in Device Manager, or after running your batch file. I
>> won't try to meddle with Enum, but how do I grant myself permission if
>> I did want to?? I will read the articles you mention, but since this
>> is the file that is causing my 20 min startup delay, ex-infection or
>> otherwise - how do I get rid of my system searching for it?? Thanks
>> again.
>
> The registry permissions are just like regular NTFS file permissions,
> just right click on the offending key and select Permissions...
>
> If you are convinced that this is the culprit and if you cannot remove
> the device from the Device Manager then just grant yourself full control
> on the key and delete it. For the time being remove it in the
> CurrentControlSet only! If the Windows installation balks at its removal
> (when you reboot) just boot to the Last Known Good Configuration.
>
> John
Thanks John - I will try that and report back, assuming I don't mess
something up! Will take a while. Thanks again.

[john john - mvp]

Richard wrote:
> On 24/06/2010 14:59, John John - MVP wrote:
>> Richard wrote:
>>> On 24/06/2010 14:13, John John - MVP wrote:
>>>> Richard wrote:
>>>>> On 24/06/2010 13:20, John John - MVP wrote:
>>>>>> Richard wrote:
>>>>>>> (This may be repeated....if so, sorry!)When I start my computer
>>>>>>> (with
>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and
>>>>>>> before
>>>>>>> Windows even kicks in, I get a white progress bar at the bottom of
>>>>>>> the
>>>>>>> screen that fills up over about 20 minutes before the usual Windows
>>>>>>> logo/start screen appears. Looking at the event viewer for the
>>>>>>> System
>>>>>>> I find that "boot-start or system-start driver "bthex" was not
>>>>>>> found.
>>>>>>> Looking in the Registry indicates that bthex is expected to be found
>>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>>>>> deleted\renamed it or something. I have put my installation DVD in
>>>>>>> the
>>>>>>> drive and tried a repair but this driver cannot be located there,
>>>>>>> and
>>>>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>>>>> might find this system file, or maybe even search for it on their
>>>>>>> own
>>>>>>> Syste32 folder and make it available to me?? Many thanks for any
>>>>>>> help
>>>>>>> in advance.
>>>>>>
>>>>>> If it's a driver it would be a .sys file (not a .dll). A search for
>>>>>> this
>>>>>> file yields no results, often an indication that the file is virus or
>>>>>> malware related. I would suggest that you make sure that the
>>>>>> machine is
>>>>>> free of any pests.
>>>>>>
>>>>>> Where *exactly* in the registry did you find reference to this
>>>>>> file? It
>>>>>> could be that your Anti-Virus tools have removed an infection and
>>>>>> that
>>>>>> the entry is just a remnant.
>>>>>>
>>>>>> John
>>>>> Appears at HKLM/System/ControlSet001(and
>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>>>>> I am not allowed to edit: also at ditto\controlset001 (and
>>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>>>>> references, could that help??
>>>>
>>>> Is it in the CurrentControlSet?
>>>>
>>>> Look for phantom devices in the Device Manager and see if any make
>>>> mention this BTHEX driver:
>>>>
>>>> Device Manager does not display devices that are not connected to the
>>>> Windows XP-based computer
>>>> http://support.microsoft.com/kb/315539
>>>>
>>>> This little batch file will automatically set the Device Manager to
>>>> show
>>>> phantom devices and open it for you:
>>>>
>>>> ----------------------------------------------------
>>>> set devmgr_show_nonpresent_devices-1
>>>> start devmgmt.msc
>>>> ----------------------------------------------------
>>>>
>>>> You cannot delete the keys in the Enum section because you do not have
>>>> permission to do so, grant yourself the necessary permissions and you
>>>> will be able to remove the keys. Before you do that keep in mind that
>>>> there is a good reason why only the System account has permission to
>>>> delete keys in the in the \Enum branch! It would be best to remove the
>>>> device in the Device Manager instead of removing it from the Enum keys.
>>>>
>>>> Before you change the permissions and delete keys please read the
>>>> following:
>>>>
>>>> Enum
>>>> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>>>>
>>>> System and Startup Settings
>>>> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>>>>
>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select
>>>> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>>>>
>>>> John
>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000.
>>> No mention in Device Manager, or after running your batch file. I
>>> won't try to meddle with Enum, but how do I grant myself permission if
>>> I did want to?? I will read the articles you mention, but since this
>>> is the file that is causing my 20 min startup delay, ex-infection or
>>> otherwise - how do I get rid of my system searching for it?? Thanks
>>> again.
>>
>> The registry permissions are just like regular NTFS file permissions,
>> just right click on the offending key and select Permissions...
>>
>> If you are convinced that this is the culprit and if you cannot remove
>> the device from the Device Manager then just grant yourself full control
>> on the key and delete it. For the time being remove it in the
>> CurrentControlSet only! If the Windows installation balks at its removal
>> (when you reboot) just boot to the Last Known Good Configuration.
>>
>> John
> Thanks John - I will try that and report back, assuming I don't mess
> something up! Will take a while. Thanks again.

You're welcome. See my other post about disabling/removing the service.

John

[richard]

On 24/06/2010 15:09, John John - MVP wrote:
>
> John John - MVP wrote:
>> Richard wrote:
>>> On 24/06/2010 14:13, John John - MVP wrote:
>>>> Richard wrote:
>>>>> On 24/06/2010 13:20, John John - MVP wrote:
>>>>>> Richard wrote:
>>>>>>> (This may be repeated....if so, sorry!)When I start my computer
>>>>>>> (with
>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and
>>>>>>> before
>>>>>>> Windows even kicks in, I get a white progress bar at the bottom
>>>>>>> of the
>>>>>>> screen that fills up over about 20 minutes before the usual Windows
>>>>>>> logo/start screen appears. Looking at the event viewer for the
>>>>>>> System
>>>>>>> I find that "boot-start or system-start driver "bthex" was not
>>>>>>> found.
>>>>>>> Looking in the Registry indicates that bthex is expected to be found
>>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>>>>> deleted\renamed it or something. I have put my installation DVD
>>>>>>> in the
>>>>>>> drive and tried a repair but this driver cannot be located there,
>>>>>>> and
>>>>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>>>>> might find this system file, or maybe even search for it on their
>>>>>>> own
>>>>>>> Syste32 folder and make it available to me?? Many thanks for any
>>>>>>> help
>>>>>>> in advance.
>>>>>>
>>>>>> If it's a driver it would be a .sys file (not a .dll). A search
>>>>>> for this
>>>>>> file yields no results, often an indication that the file is virus or
>>>>>> malware related. I would suggest that you make sure that the
>>>>>> machine is
>>>>>> free of any pests.
>>>>>>
>>>>>> Where *exactly* in the registry did you find reference to this
>>>>>> file? It
>>>>>> could be that your Anti-Virus tools have removed an infection and
>>>>>> that
>>>>>> the entry is just a remnant.
>>>>>>
>>>>>> John
>>>>> Appears at HKLM/System/ControlSet001(and
>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>>>>> I am not allowed to edit: also at ditto\controlset001 (and
>>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>>>>> references, could that help??
>>>>
>>>> Is it in the CurrentControlSet?
>>>>
>>>> Look for phantom devices in the Device Manager and see if any make
>>>> mention this BTHEX driver:
>>>>
>>>> Device Manager does not display devices that are not connected to the
>>>> Windows XP-based computer
>>>> http://support.microsoft.com/kb/315539
>>>>
>>>> This little batch file will automatically set the Device Manager to
>>>> show
>>>> phantom devices and open it for you:
>>>>
>>>> ----------------------------------------------------
>>>> set devmgr_show_nonpresent_devices-1
>>>> start devmgmt.msc
>>>> ----------------------------------------------------
>>>>
>>>> You cannot delete the keys in the Enum section because you do not have
>>>> permission to do so, grant yourself the necessary permissions and you
>>>> will be able to remove the keys. Before you do that keep in mind that
>>>> there is a good reason why only the System account has permission to
>>>> delete keys in the in the \Enum branch! It would be best to remove the
>>>> device in the Device Manager instead of removing it from the Enum keys.
>>>>
>>>> Before you change the permissions and delete keys please read the
>>>> following:
>>>>
>>>> Enum
>>>> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>>>>
>>>> System and Startup Settings
>>>> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>>>>
>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select
>>>> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>>>>
>>>> John
>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000.
>>> No mention in Device Manager, or after running your batch file. I
>>> won't try to meddle with Enum, but how do I grant myself permission
>>> if I did want to?? I will read the articles you mention, but since
>>> this is the file that is causing my 20 min startup delay,
>>> ex-infection or otherwise - how do I get rid of my system searching
>>> for it?? Thanks again.
>>
>> The registry permissions are just like regular NTFS file permissions,
>> just right click on the offending key and select Permissions...
>>
>> If you are convinced that this is the culprit and if you cannot remove
>> the device from the Device Manager then just grant yourself full
>> control on the key and delete it. For the time being remove it in the
>> CurrentControlSet only! If the Windows installation balks at its
>> removal (when you reboot) just boot to the Last Known Good Configuration.
>
> PS. The problem is more likely to be caused by the status of the service
> in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I
> suggest that you remove or disable the service there. To disable the
> service set its Start value to 4.
>
> John
Well, Having deleted it from the CurrentControlSet and rebooted, the
problem is still there, but Event Viewer no longer reports a problem in
looking for bthex. So I presume bthex, whatever it is, is *not* the
reason for my slow progress bar in booting up. Any ideas as to what it
might now be? Could it be something to do with Power On Self Testing, or
if not is there any way of diagnosing why this has suddenly started
occuring? Cheers.
Richard

[john john - mvp]

Richard wrote:
> On 24/06/2010 15:09, John John - MVP wrote:
>>
>> John John - MVP wrote:
>>> Richard wrote:
>>>> On 24/06/2010 14:13, John John - MVP wrote:
>>>>> Richard wrote:
>>>>>> On 24/06/2010 13:20, John John - MVP wrote:
>>>>>>> Richard wrote:
>>>>>>>> (This may be repeated....if so, sorry!)When I start my computer
>>>>>>>> (with
>>>>>>>> Win XP Home SP3 installed), just after the BIOS info screen and
>>>>>>>> before
>>>>>>>> Windows even kicks in, I get a white progress bar at the bottom
>>>>>>>> of the
>>>>>>>> screen that fills up over about 20 minutes before the usual Windows
>>>>>>>> logo/start screen appears. Looking at the event viewer for the
>>>>>>>> System
>>>>>>>> I find that "boot-start or system-start driver "bthex" was not
>>>>>>>> found.
>>>>>>>> Looking in the Registry indicates that bthex is expected to be
>>>>>>>> found
>>>>>>>> in Win\System32\Drivers. It is not there, so something has suddenly
>>>>>>>> deleted\renamed it or something. I have put my installation DVD
>>>>>>>> in the
>>>>>>>> drive and tried a repair but this driver cannot be located there,
>>>>>>>> and
>>>>>>>> I have googled for it but with no luck. Can anyone suggest where I
>>>>>>>> might find this system file, or maybe even search for it on their
>>>>>>>> own
>>>>>>>> Syste32 folder and make it available to me?? Many thanks for any
>>>>>>>> help
>>>>>>>> in advance.
>>>>>>>
>>>>>>> If it's a driver it would be a .sys file (not a .dll). A search
>>>>>>> for this
>>>>>>> file yields no results, often an indication that the file is
>>>>>>> virus or
>>>>>>> malware related. I would suggest that you make sure that the
>>>>>>> machine is
>>>>>>> free of any pests.
>>>>>>>
>>>>>>> Where *exactly* in the registry did you find reference to this
>>>>>>> file? It
>>>>>>> could be that your Anti-Virus tools have removed an infection and
>>>>>>> that
>>>>>>> the entry is just a remnant.
>>>>>>>
>>>>>>> John
>>>>>> Appears at HKLM/System/ControlSet001(and
>>>>>> 003)/Enum/Root/LEGACY_BTHEX/NextInstance (REG_DWORD set to "1") which
>>>>>> I am not allowed to edit: also at ditto\controlset001 (and
>>>>>> 3)/services/bthex/ (and services/enum/explorerbars/{C4EE31})ImagePath
>>>>>> REG_DWORD set to "system32/drivers/bthex.sys." If I delete all these
>>>>>> references, could that help??
>>>>>
>>>>> Is it in the CurrentControlSet?
>>>>>
>>>>> Look for phantom devices in the Device Manager and see if any make
>>>>> mention this BTHEX driver:
>>>>>
>>>>> Device Manager does not display devices that are not connected to the
>>>>> Windows XP-based computer
>>>>> http://support.microsoft.com/kb/315539
>>>>>
>>>>> This little batch file will automatically set the Device Manager to
>>>>> show
>>>>> phantom devices and open it for you:
>>>>>
>>>>> ----------------------------------------------------
>>>>> set devmgr_show_nonpresent_devices-1
>>>>> start devmgmt.msc
>>>>> ----------------------------------------------------
>>>>>
>>>>> You cannot delete the keys in the Enum section because you do not have
>>>>> permission to do so, grant yourself the necessary permissions and you
>>>>> will be able to remove the keys. Before you do that keep in mind that
>>>>> there is a good reason why only the System account has permission to
>>>>> delete keys in the in the \Enum branch! It would be best to remove the
>>>>> device in the Device Manager instead of removing it from the Enum
>>>>> keys.
>>>>>
>>>>> Before you change the permissions and delete keys please read the
>>>>> following:
>>>>>
>>>>> Enum
>>>>> http://technet.microsoft.com/en-ca/libr ... 76176.aspx
>>>>>
>>>>> System and Startup Settings
>>>>> http://technet.microsoft.com/en-us/libr ... 42541.aspx
>>>>>
>>>>> HKEY_LOCAL_MACHINE\SYSTEM\Select
>>>>> http://technet.microsoft.com/en-ca/libr ... 78528.aspx
>>>>>
>>>>> John
>>>> Yes - it is in CurrentControlSet under /Enum/Root/LEGACY_BTHEX/0000.
>>>> No mention in Device Manager, or after running your batch file. I
>>>> won't try to meddle with Enum, but how do I grant myself permission
>>>> if I did want to?? I will read the articles you mention, but since
>>>> this is the file that is causing my 20 min startup delay,
>>>> ex-infection or otherwise - how do I get rid of my system searching
>>>> for it?? Thanks again.
>>>
>>> The registry permissions are just like regular NTFS file permissions,
>>> just right click on the offending key and select Permissions...
>>>
>>> If you are convinced that this is the culprit and if you cannot remove
>>> the device from the Device Manager then just grant yourself full
>>> control on the key and delete it. For the time being remove it in the
>>> CurrentControlSet only! If the Windows installation balks at its
>>> removal (when you reboot) just boot to the Last Known Good
>>> Configuration.
>>
>> PS. The problem is more likely to be caused by the status of the service
>> in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services branch, I
>> suggest that you remove or disable the service there. To disable the
>> service set its Start value to 4.
>>
>> John
> Well, Having deleted it from the CurrentControlSet and rebooted, the
> problem is still there, but Event Viewer no longer reports a problem in
> looking for bthex. So I presume bthex, whatever it is, is *not* the
> reason for my slow progress bar in booting up. Any ideas as to what it
> might now be? Could it be something to do with Power On Self Testing, or
> if not is there any way of diagnosing why this has suddenly started
> occuring? Cheers.

I think that what you are seeing is part of the Windows boot process
rather than the POST routine, an easy way to tell would be to press/tap
the F8 key when the computer is booting and see how long it takes for
the advanced Windows boot options show up. Or put a second (phony) line
in the boot.ini file and see how long it takes for ntldr to parse and
present the boot menu.

John