Windows Freezes Daily
in [Windows Performance]
|
From: Gerry Cornell on 6 Jan 2006 10:26 Nancy You do not find too many fans of Norton in these newsgroups and perhaps this might also be said of AOL (although AOL seldom get a mention in the operating system groups ). I have recently dumped Norton Anti-Virus in favour of AVG 7 ( freeware ) and Norton Personal Firewall for the Windows Firewall. A change would definitely help with your system performance. Lower overheads. http://free.grisoft.com/doc/FAQ Removal of Norton and AOL products is reported to be problematic. My removal of Norton was easy but that was because I was changing a motherboard and the master hard drive. No choice but to reinstall the operating system and all programmes. BTW MSN Messenger can also be problematic. Your freezes could be down to spyware, which comes in all shapes, sizes and colours. I have not said anything before because your first two sentences beginning the thread were "I have ran every scan for viruses and malware. My computer is clean." Before running anti-spyware programmes in Safe Mode delete Temporary Internet Files (IE Tools>Internet Options>General) accepting the option to delete all offline content. Reboot and delete contents of all TEMP folders and your Recycle Bin. After cleaning try HijackThis. Install and run HijackThis: Download HijackThis (Freeware) http://tomcoyote.com/hjt/ Finally run HijackThis and post the HijackThis log to the HijackThis forum here: http://aumha.net/ You will need to register with Aumha to be able to post. I would be interested in seeing a HijackThis log. Could you send a copy by email to my address, which is given below removing dump from the address. gcjc(a)btdumpinternet.com -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ "Nancy" <Nancy(a)discussions.microsoft.com> wrote in message news:737346A8-C117-448E-BCB9-E382BC3830D1(a)microsoft.com... > Computer froze again. > > Rebooted > > > > Current Pagefile Usage: 28 MB > > started windows explorer 34MB > > open AOL 43MB > > Signed on to AOL 55MB > > 65 > > Open Netscape (8.0) 74MB > > Start Yahoo Messenger 117MB > > 140MB > > Open MS Messenger 146MB > > Sign on to MSMessenger 160MB > > open WMedia Player 168 > > Playing (live radio streaming) 174MB > > 188 > > 206 > > 298 > > 311 > 326 > > four hours later AV scan 618MB > > few minutes later, system freeze (first time during AV scan :( ) > > > Programs running in the background (besides the usual XP) : > > Spyware Doctor (I had disabled it awhile back thining it may have been the > problem but system froze with it uninstalled), Microsoft Time Zone (I > just > installed it and had it disabled - running minimal startup programs - and > computer still froze, Norton Firewall, Norton Systemworks, updates from HP > agent, and AOL anti-spyware (I had uninstalled AOL antispyware thinking it > may have been the problem and the computer still froze) Yesterday I > changed my MSIE internet settings to notify me before Active X ran and > that > did not help. Once again, just the usual information in the logs - no > errors. > > When I was trying to get help from HP last month, they had me turn off all > the unnecesary startup programs - yet the computer froze then too so I > reinstalled them (no change in frequency) Is it possible to have > malware > that is undetectable by all the anti-spyware and antivirus software? > computer even has been scanned with a Linux based program when I was > getting > the memory upgrade a couple of weeks ago and they could not find > something. > Maybe I have something my firewall is blocking and it freezes then? (why > the > random time though?) I have been considering getting another AV and > uninstalling norton systemworks to see if that is the problem --- I've > already uninstalled a few programs at a time trying to find a program > causing > this - yet each time I do, the computer still freezes. > > I used to love norton products although they sure have changed - and not > for > the better. I was considering changing AVs when my subscription expires > in > April - although I may even do so now to see if it solves the problem (I'm > thinking since I like Trend Micro's House Call, I may go with Trend Micro) > I > like Norton Firewall for the ad blocking (not something I would give up - > I > would consider living with the freezes if norton firewall was causing > them) > > > > > > > "Gerry Cornell" wrote: > >> Nancy >> >> Can we try another tack and look at memory usage? >> >> Try Ctrl+Alt+Delete to select Task Manager and click the Performance Tab. >> What is the Total, the Commit Charge and the Peak? >> >> You may check on pagefile (virtual memory) usage with Page File Monitor >> for >> XP: >> http://www.dougknox.com/ >> >> If you get anything much more than 20 / 30 mb virtual memory usage the >> system for some reason needs to resort to using virtual memory. Given the >> amount of memory you have I would not expect this to be happening but >> let's >> see if it is? The system uses virtual memory for a limited number of >> tasks >> rather than RAM memory so you will always see some virtual memory usage.. >> Keep a check on this over a period of a day or so and see if you can >> detect >> what the position may be when you encounter a freeze. >> >> Are there any yellow question marks in Device Manager? Right click on >> the My Computer icon on your Desktop and select Properties. Hardware, >> Device Manager. If yes what is the Device Error code? >> >> What anti-virus programme are you using? >> >> -- >> >> Hope this helps. >> >> Gerry >> ~~~~ >> FCA >> Stourport, England >> >> Enquire, plan and execute >> ~~~~~~~~~~~~~~~~~~~ >> >> >> >> "Nancy" <Nancy(a)discussions.microsoft.com> wrote in message >> news:EB83D06B-6F0E-4798-A17E-AA3EEFB4C61F(a)microsoft.com... >> >I did post the ENTIRE system log over the past few days. There is NO >> >error >> > logged when the system freezes - that's what makes this so >> > frustrating - >> > because if there was an error, it would be easy to troubleshoot. >> > Except >> > for >> > the occasional freezing, this is an extremely stable system and there >> > is >> > only >> > a few (if any) error events that are logged. I did include the >> > errors - >> > although none of them relate to the system freezing. When the computer >> > freezes, it logs information events and I clearly marked those. AGAIN, >> > when >> > the system freezes, there is NO ERROR EVENT LOGGED. >> > >> > Here is the first one: >> > >> > Information 1/4/2006 8:58:13 PM Tcpip None 4201 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:08 PM eventlog None 6005 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:08 PM eventlog None 6009 N/A YOUR-03667082DE >> > >> > FREEZE HAPPENED HERE - logged above (first time it's ever happened >> > twice >> > in a day) Here is the information event that was logged when the >> > system >> > froze (AGAIN, there was NO ERROR EVENT LOGGED) : >> > >> > Event Type: Information >> > Event Source: EventLog >> > Event Category: None >> > Event ID: 6009 >> > Date: 1/4/2006 >> > Time: 8:58:08 PM >> > User: N/A >> > Computer: YOUR-03667082DE >> > Description: >> > Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor >> > Free. >> > >> > For more information, see Help and Support Center at >> > http://go.microsoft.com/fwlink/events.asp. >> > >> > >> > Here is the COMPLETE system log over the past few days (including the >> > few >> > error logs) NONE of the few error logs correspond to the system >> > freezing. >> > Once again, except for the occasional freezing, this is an EXTREMELY >> > stable >> > system that rarely gives any errors or problems. >> > >> > >> > Type Date Time Source Category Event User Computer >> > Information 1/4/2006 9:00:03 PM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 8:59:55 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:59:51 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:59:47 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:59:13 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:59:08 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:59:03 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:46 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:45 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:45 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:40 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:40 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:38 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:38 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:37 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:37 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:30 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:29 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:29 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:29 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:29 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:29 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 8:58:29 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > >> > Information 1/4/2006 8:58:13 PM Tcpip None 4201 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:08 PM eventlog None 6005 N/A YOUR-03667082DE >> > Information 1/4/2006 8:58:08 PM eventlog None 6009 N/A YOUR-03667082DE >> > >> > FREEZE HAPPENED HERE (first time it's ever happened twice in a day) >> > >> > Event Type: Information >> > Event Source: EventLog >> > Event Category: None >> > Event ID: 6009 >> > Date: 1/4/2006 >> > Time: 8:58:08 PM >> > User: N/A >> > Computer: YOUR-03667082DE >> > Description: >> > Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor >> > Free. >> > >> > For more information, see Help and Support Center at >> > http://go.microsoft.com/fwlink/events.asp. >> > >> > >> > Information 1/4/2006 8:47:50 PM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 8:47:45 PM RemoteAccess None 20159 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 8:40:09 PM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 8:39:53 PM RemoteAccess None 20159 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 6:55:33 PM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 6:55:16 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:55:13 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:55:08 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:53:01 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:56 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:52 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:33 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:32 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:32 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:28 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:27 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:27 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:27 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:22 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:21 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:19 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:16 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:16 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:16 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:16 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 6:52:16 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 6:52:16 PM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > >> > Information 1/4/2006 6:52:07 PM Tcpip None 4201 N/A YOUR-03667082DE >> > Information 1/4/2006 6:51:57 PM eventlog None 6005 N/A YOUR-03667082DE >> > Information 1/4/2006 6:51:57 PM eventlog None 6009 N/A YOUR-03667082DE >> > >> > FREEZE HAPPENED HERE >> > >> > Event Type: Information >> > Event Source: EventLog >> > Event Category: None >> > Event ID: 6009 >> > Date: 1/4/2006 >> > Time: 6:51:57 PM >> > User: N/A >> > Computer: YOUR-03667082DE >> > Description: >> > Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor >> > Free. >> > >> > For more information, see Help and Support Center at >> > http://go.microsoft.com/fwlink/events.asp. >> > >> > >> > >> > Information 1/4/2006 12:00:11 PM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 12:00:05 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 12:00:00 PM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:59:56 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:59:15 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:59:11 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:59:06 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:49 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:47 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:47 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:42 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:42 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:41 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:40 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:39 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:39 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:33 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:32 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:32 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:32 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:32 AM Service Control >> > Manager None 7035 SYSTEM YOUR-03667082DE >> > Information 1/4/2006 11:58:32 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > >> > >> > Information 1/4/2006 11:58:21 AM Tcpip None 4201 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:11 AM eventlog None 6005 N/A YOUR-03667082DE >> > Information 1/4/2006 11:58:11 AM eventlog None 6009 N/A YOUR-03667082DE >> > Information 1/4/2006 11:18:27 AM eventlog None 6006 N/A YOUR-03667082DE >> > >> > NO FREEZE >> > >> > Information 1/4/2006 11:18:18 AM Application Popup None 26 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 11:17:58 AM RemoteAccess None 20159 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 11:17:57 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE >> > Information 1/4/2006 11:16:12 AM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 11:16:07 AM RemoteAccess None 20159 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 11:13:50 AM RemoteAccess None 20158 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 11:13:43 AM RemoteAccess None 20159 N/A >> > YOUR-03667082DE >> > Information 1/4/2006 8:20:25 AM Service Control >> > Manager None 7036 N/A YOUR-03667082DE
From: hive-mind on 6 Jan 2006 12:00 I would check out your stick(s) of physical RAM inside the computer. You can use some free diagnostics programs out there to see if maybe a part of your RAM might be bad and/or need replacing. Go to MemTest86.com, it's a free diagnostics program. Download and run. It'll ask for a blank floppy disk to extract the files to and boot up your computer with that disk. It should auto-run from DOS when booting up and it'll check the RAM modules and see if they are bad. As far as PageFiles for Windows 2000 / 2003 / XP / Media Center Edition go, I almost always (no matter how much RAM you have) set the PageFile to Min. 1536MB and Max. 2048MB. This way you should always have enough of a PageFile to work with. If you are running out with it set this way. Then are running way too many programs at once. And not just open windows count, but also whatever processes windows has running in the backround too. Like antivirus software, mouse software, sound, etc. But under 2000 or XP with at least 512MB you shouldn't run out of PageFile space. Or even physical RAM. And take a break every few hours or so to reboot and get your RAM back. But if normal programs seem like they aren't giving your RAM back when you close them, then I would really look into getting your RAM module checked out and/or replace it with a new one of a good brand. Not that stuff they sell @ BestBuy and CompUSA either. "Gerry Cornell" wrote: > Nancy > > Following your figures I have reviewed a conversation with a number of > others > concerning pagefile usage. Most users tend to have that level of pagefile > usage. > However, there are certain types of user whose usage goes way above that > level of usage. Those who do video coding / editing and run graphics > programmes are such a type of user. One user regularly had 600 mb pagefile > usage. > > The discussion was also about memory leaks i.e. where a programme does not > release memory after use. If this happens then an ever increasing demand for > memory eventually exhausts the available RAM and virtual memory. Some users > do not switch their computer off and this is where a memory leak becomes > more > obvious. Restarting a computer releases any memory not previously released. > > You need to watch whether pagefile usage grows and reduces as you open > and close applications or whether the trend is an ever growing usage. > > You might also provide a list of say ten programmes, which have the highest > peak memory usage in Task Manager, to see if there are any surprises. > > -- > > Hope this helps. > > Gerry > ~~~~ > FCA > Stourport, England > > Enquire, plan and execute > ~~~~~~~~~~~~~~~~~~~ > > > > "Gerry Cornell" <gcjc(a)tenretnitb.com> wrote in message news:... > > Nancy > > > > Can we try another tack and look at memory usage? > > > > Try Ctrl+Alt+Delete to select Task Manager and click the Performance Tab. > > What is the Total, the Commit Charge and the Peak? > > > > You may check on pagefile (virtual memory) usage with Page File Monitor > > for > > XP: > > http://www.dougknox.com/ > > > > If you get anything much more than 20 / 30 mb virtual memory usage the > > system for some reason needs to resort to using virtual memory. Given the > > amount of memory you have I would not expect this to be happening but > > let's > > see if it is? The system uses virtual memory for a limited number of tasks > > rather than RAM memory so you will always see some virtual memory usage.. > > Keep a check on this over a period of a day or so and see if you can > > detect > > what the position may be when you encounter a freeze. > > > > Are there any yellow question marks in Device Manager? Right click on > > the My Computer icon on your Desktop and select Properties. Hardware, > > Device Manager. If yes what is the Device Error code? > > > > What anti-virus programme are you using? > > > > -- > > > > Hope this helps. > > > > Gerry > > ~~~~ > > FCA > > Stourport, England > > > > Enquire, plan and execute > > ~~~~~~~~~~~~~~~~~~~ > > > > > > > > "Nancy" <Nancy(a)discussions.microsoft.com> wrote in message > > news:EB83D06B-6F0E-4798-A17E-AA3EEFB4C61F(a)microsoft.com... > >>I did post the ENTIRE system log over the past few days. There is NO > >>error > >> logged when the system freezes - that's what makes this so frustrating - > >> because if there was an error, it would be easy to troubleshoot. Except > >> for > >> the occasional freezing, this is an extremely stable system and there is > >> only > >> a few (if any) error events that are logged. I did include the errors - > >> although none of them relate to the system freezing. When the computer > >> freezes, it logs information events and I clearly marked those. AGAIN, > >> when > >> the system freezes, there is NO ERROR EVENT LOGGED. > >> > >> Here is the first one: > >> > >> Information 1/4/2006 8:58:13 PM Tcpip None 4201 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:08 PM eventlog None 6005 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:08 PM eventlog None 6009 N/A YOUR-03667082DE > >> > >> FREEZE HAPPENED HERE - logged above (first time it's ever happened > >> twice > >> in a day) Here is the information event that was logged when the system > >> froze (AGAIN, there was NO ERROR EVENT LOGGED) : > >> > >> Event Type: Information > >> Event Source: EventLog > >> Event Category: None > >> Event ID: 6009 > >> Date: 1/4/2006 > >> Time: 8:58:08 PM > >> User: N/A > >> Computer: YOUR-03667082DE > >> Description: > >> Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free. > >> > >> For more information, see Help and Support Center at > >> http://go.microsoft.com/fwlink/events.asp. > >> > >> > >> Here is the COMPLETE system log over the past few days (including the few > >> error logs) NONE of the few error logs correspond to the system > >> freezing. > >> Once again, except for the occasional freezing, this is an EXTREMELY > >> stable > >> system that rarely gives any errors or problems. > >> > >> > >> Type Date Time Source Category Event User Computer > >> Information 1/4/2006 9:00:03 PM RemoteAccess None 20158 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 8:59:55 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:59:51 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:59:47 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:59:13 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:59:08 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:59:03 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:46 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:45 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:45 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:40 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:40 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:38 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:38 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:37 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:37 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:30 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:29 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:29 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:29 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:29 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:29 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 8:58:29 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> > >> Information 1/4/2006 8:58:13 PM Tcpip None 4201 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:08 PM eventlog None 6005 N/A YOUR-03667082DE > >> Information 1/4/2006 8:58:08 PM eventlog None 6009 N/A YOUR-03667082DE > >> > >> FREEZE HAPPENED HERE (first time it's ever happened twice in a day) > >> > >> Event Type: Information > >> Event Source: EventLog > >> Event Category: None > >> Event ID: 6009 > >> Date: 1/4/2006 > >> Time: 8:58:08 PM > >> User: N/A > >> Computer: YOUR-03667082DE > >> Description: > >> Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free. > >> > >> For more information, see Help and Support Center at > >> http://go.microsoft.com/fwlink/events.asp. > >> > >> > >> Information 1/4/2006 8:47:50 PM RemoteAccess None 20158 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 8:47:45 PM RemoteAccess None 20159 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 8:40:09 PM RemoteAccess None 20158 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 8:39:53 PM RemoteAccess None 20159 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 6:55:33 PM RemoteAccess None 20158 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 6:55:16 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:55:13 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:55:08 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:53:01 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:56 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:52 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:33 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:32 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:32 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:28 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:27 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:27 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:27 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:22 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:21 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:19 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:16 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:16 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:16 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:16 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 6:52:16 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 6:52:16 PM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> > >> Information 1/4/2006 6:52:07 PM Tcpip None 4201 N/A YOUR-03667082DE > >> Information 1/4/2006 6:51:57 PM eventlog None 6005 N/A YOUR-03667082DE > >> Information 1/4/2006 6:51:57 PM eventlog None 6009 N/A YOUR-03667082DE > >> > >> FREEZE HAPPENED HERE > >> > >> Event Type: Information > >> Event Source: EventLog > >> Event Category: None > >> Event ID: 6009 > >> Date: 1/4/2006 > >> Time: 6:51:57 PM > >> User: N/A > >> Computer: YOUR-03667082DE > >> Description: > >> Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free. > >> > >> For more information, see Help and Support Center at > >> http://go.microsoft.com/fwlink/events.asp. > >> > >> > >> > >> Information 1/4/2006 12:00:11 PM RemoteAccess None 20158 N/A > >> YOUR-03667082DE > >> Information 1/4/2006 12:00:05 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 12:00:00 PM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 11:59:56 AM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 11:59:15 AM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 11:59:11 AM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 11:59:06 AM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 11:58:49 AM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 11:58:47 AM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 11:58:47 AM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE > >> Information 1/4/2006 11:58:42 AM Service Control > >> Manager None 7036 N/A YOUR-03667082DE > >> Information 1/4/2006 11:58:42 AM Service Control > >> Manager None 7035 SYSTEM YOUR-03667082DE
From: Nancy on 6 Jan 2006 15:27 Gerry, I have repeatedly scanned my computerformalware and viruses and none of the scans have shown anything. The computer was also scanned with a Linux based program when it was in the shop for the HD replacement (under warranty) and when in the shop for the memory upgrade two weeks ago. The repair shop's scan showed no malware / viruses. I am revisiting every possibility once again to see if there is something that has been overlooked. I do things very thoroughly and to overlook the malware / virsus possibility when revisiting every other possibility would not be keeping to my standards. I even checked the devise drivers once again to make sure they are not the cuilprit. malware and viruses will be checked again just to be thorough - I doubt they are there, but it is something I will continue to look into until this problem is solved. I'm about to download and run Hijack This and I will post it to their forum and email you a copy of it as requested. I wish there were an error message when it freezes - it would help to have a starting point in where to look. I have used AOL and MSN Messenger since I got this computerfebruary 2005 (and on my old computer for many years) The problem started in september. Since the freeze started happening, I upgraded MS Messenger - and for a time had it off and the computer still froze so I started using it again (sorry - forgot to mention that) I think I have it narrowed down to NAV being the problem if it is software related (although, once again, everything will be repeatedly checked until I find the solution) Thanks again, "Gerry Cornell" wrote: > Nancy > > You do not find too many fans of Norton in these newsgroups and perhaps > this might also be said of AOL (although AOL seldom get a mention in > the operating system groups ). > > I have recently dumped Norton Anti-Virus in favour of AVG 7 ( freeware ) > and Norton Personal Firewall for the Windows Firewall. A change would > definitely help with your system performance. Lower overheads. > http://free.grisoft.com/doc/FAQ > > Removal of Norton and AOL products is reported to be problematic. > My removal of Norton was easy but that was because I was changing a > motherboard and the master hard drive. No choice but to reinstall the > operating system and all programmes. > > BTW MSN Messenger can also be problematic. > > Your freezes could be down to spyware, which comes in all shapes, > sizes and colours. I have not said anything before because your first two > sentences beginning the thread were "I have ran every scan for viruses > and malware. My computer is clean." > > Before running anti-spyware programmes in Safe Mode delete Temporary > Internet Files (IE Tools>Internet Options>General) accepting the option to > delete all offline content. Reboot and delete contents of all TEMP folders > and your Recycle Bin. > > After cleaning try HijackThis. > > Install and run HijackThis: > Download HijackThis (Freeware) > http://tomcoyote.com/hjt/ > > Finally run HijackThis and post the HijackThis log to the HijackThis > forum here: > http://aumha.net/ > > You will need to register with Aumha to be able to post. > > I would be interested in seeing a HijackThis log. Could you send a > copy by email to my address, which is given below removing dump from the > address. > > gcjc(a)btdumpinternet.com > > -- > > Hope this helps. > > Gerry > ~~~~ > FCA > Stourport, England > > Enquire, plan and execute > ~~~~~~~~~~~~~~~~~~~ > > "Nancy" <Nancy(a)discussions.microsoft.com> wrote in message > news:737346A8-C117-448E-BCB9-E382BC3830D1(a)microsoft.com... > > Computer froze again. > > > > Rebooted > > > > > > > > Current Pagefile Usage: 28 MB > > > > started windows explorer 34MB > > > > open AOL 43MB > > > > Signed on to AOL 55MB > > > > 65 > > > > Open Netscape (8.0) 74MB > > > > Start Yahoo Messenger 117MB > > > > 140MB > > > > Open MS Messenger 146MB > > > > Sign on to MSMessenger 160MB > > > > open WMedia Player 168 > > > > Playing (live radio streaming) 174MB > > > > 188 > > > > 206 > > > > 298 > > > > 311 > > 326 > > > > four hours later AV scan 618MB > > > > few minutes later, system freeze (first time during AV scan :( ) > > > > > > Programs running in the background (besides the usual XP) : > > > > Spyware Doctor (I had disabled it awhile back thining it may have been the > > problem but system froze with it uninstalled), Microsoft Time Zone (I > > just > > installed it and had it disabled - running minimal startup programs - and > > computer still froze, Norton Firewall, Norton Systemworks, updates from HP > > agent, and AOL anti-spyware (I had uninstalled AOL antispyware thinking it > > may have been the problem and the computer still froze) Yesterday I > > changed my MSIE internet settings to notify me before Active X ran and > > that > > did not help. Once again, just the usual information in the logs - no > > errors. > > > > When I was trying to get help from HP last month, they had me turn off all > > the unnecesary startup programs - yet the computer froze then too so I > > reinstalled them (no change in frequency) Is it possible to have > > malware > > that is undetectable by all the anti-spyware and antivirus software? > > computer even has been scanned with a Linux based program when I was > > getting > > the memory upgrade a couple of weeks ago and they could not find > > something. > > Maybe I have something my firewall is blocking and it freezes then? (why > > the > > random time though?) I have been considering getting another AV and > > uninstalling norton systemworks to see if that is the problem --- I've > > already uninstalled a few programs at a time trying to find a program > > causing > > this - yet each time I do, the computer still freezes. > > > > I used to love norton products although they sure have changed - and not > > for > > the better. I was considering changing AVs when my subscription expires > > in > > April - although I may even do so now to see if it solves the problem (I'm > > thinking since I like Trend Micro's House Call, I may go with Trend Micro) > > I > > like Norton Firewall for the ad blocking (not something I would give up - > > I > > would consider living with the freezes if norton firewall was causing > > them) > > > > > > > > > > > > > > "Gerry Cornell" wrote: > > > >> Nancy > >> > >> Can we try another tack and look at memory usage? > >> > >> Try Ctrl+Alt+Delete to select Task Manager and click the Performance Tab. > >> What is the Total, the Commit Charge and the Peak? > >> > >> You may check on pagefile (virtual memory) usage with Page File Monitor > >> for > >> XP: > >> http://www.dougknox.com/ > >> > >> If you get anything much more than 20 / 30 mb virtual memory usage the > >> system for some reason needs to resort to using virtual memory. Given the > >> amount of memory you have I would not expect this to be happening but > >> let's > >> see if it is? The system uses virtual memory for a limited number of > >> tasks > >> rather than RAM memory so you will always see some virtual memory usage.. > >> Keep a check on this over a period of a day or so and see if you can > >> detect > >> what the position may be when you encounter a freeze. > >> > >> Are there any yellow question marks in Device Manager? Right click on > >> the My Computer icon on your Desktop and select Properties. Hardware, > >> Device Manager. If yes what is the Device Error code? > >> > >> What anti-virus programme are you using? > >> > >> -- > >> > >> Hope this helps. > >> > >> Gerry > >> ~~~~ > >> FCA > >> Stourport, England > >> > >> Enquire, plan and execute > >> ~~~~~~~~~~~~~~~~~~~ > >> > >> > >> > >> "Nancy" <Nancy(a)discussions.microsoft.com> wrote in message > >> news:EB83D06B-6F0E-4798-A17E-AA3EEFB4C61F(a)microsoft.com... > >> >I did post the ENTIRE system log over the past few days. There is NO > >> >error > >> > logged when the system freezes - that's what makes this so > >> > frustrating - > >> > because if there was an error, it would be easy to troubleshoot. > >> > Except > >> > for > >> > the occasional freezing, this is an extremely stable system and there > >> > is > >> > only > >> > a few (if any) error events that are logged. I did include the > >> > errors - > >> > although none of them relate to the system freezing. When the computer > >> > freezes, it logs information events and I clearly marked those. AGAIN, > >> > when > >> > the system freezes, there is NO ERROR EVENT LOGGED. > >> > > >> > Here is the first one: > >> > > >> > Information 1/4/2006 8:58:13 PM Tcpip None 4201 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:08 PM eventlog None 6005 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:08 PM eventlog None 6009 N/A YOUR-03667082DE > >> > > >> > FREEZE HAPPENED HERE - logged above (first time it's ever happened > >> > twice > >> > in a day) Here is the information event that was logged when the > >> > system > >> > froze (AGAIN, there was NO ERROR EVENT LOGGED) : > >> > > >> > Event Type: Information > >> > Event Source: EventLog > >> > Event Category: None > >> > Event ID: 6009 > >> > Date: 1/4/2006 > >> > Time: 8:58:08 PM > >> > User: N/A > >> > Computer: YOUR-03667082DE > >> > Description: > >> > Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor > >> > Free. > >> > > >> > For more information, see Help and Support Center at > >> > http://go.microsoft.com/fwlink/events.asp. > >> > > >> > > >> > Here is the COMPLETE system log over the past few days (including the > >> > few > >> > error logs) NONE of the few error logs correspond to the system > >> > freezing. > >> > Once again, except for the occasional freezing, this is an EXTREMELY > >> > stable > >> > system that rarely gives any errors or problems. > >> > > >> > > >> > Type Date Time Source Category Event User Computer > >> > Information 1/4/2006 9:00:03 PM RemoteAccess None 20158 N/A > >> > YOUR-03667082DE > >> > Information 1/4/2006 8:59:55 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:59:51 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:59:47 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:59:13 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:59:08 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:59:03 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:46 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:45 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:45 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:40 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:40 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:38 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:38 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:37 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:37 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:30 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:29 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:29 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:29 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE > >> > Information 1/4/2006 8:58:29 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:29 PM Service Control > >> > Manager None 7035 SYSTEM YOUR-03667082DE > >> > Information 1/4/2006 8:58:29 PM Service Control > >> > Manager None 7036 N/A YOUR-03667082DE
From: Shenan Stanley on 6 Jan 2006 16:33 Nancy wrote: > Gerry, > > I have repeatedly scanned my computerformalware and viruses and > none of the scans have shown anything. The computer was also > scanned with a Linux based program when it was in the shop for the > HD replacement (under warranty) and when in the shop for the memory > upgrade two weeks ago. The repair shop's scan showed no malware / > viruses. I am revisiting every possibility once again to see if > there is something that has been overlooked. I do things very > thoroughly and to overlook the malware / virsus possibility when > revisiting every other possibility would not be keeping to my > standards. I even checked the devise drivers once again to make > sure they are not the cuilprit. malware and viruses will be > checked again just to be thorough - I doubt they are there, but it > is something I will continue to look into until this problem is > solved. > > I'm about to download and run Hijack This and I will post it to > their forum and email you a copy of it as requested. > > I wish there were an error message when it freezes - it would help > to have a starting point in where to look. I have used AOL and MSN > Messenger since I got this computerfebruary 2005 (and on my old > computer for many years) The problem started in september. Since > the freeze started happening, I upgraded MS Messenger - and for a > time had it off and the computer still froze so I started using it > again (sorry - forgot to mention that) I think I have it narrowed > down to NAV being the problem if it is software related (although, > once again, everything will be repeatedly checked until I find the > solution) > Did you ever have them replace the power supply as suggested? -- Shenan Stanley MS-MVP -- How To Ask Questions The Smart Way http://www.catb.org/~esr/faqs/smart-questions.html
From: Gerry Cornell on 6 Jan 2006 18:49
Nancy I have not used CWShredder but it detects a small group of malware the other anti-spyware programmes may not. http://www.intermute.com/products/cwshredder.html -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ "Nancy" <Nancy(a)discussions.microsoft.com> wrote in message news:97CC1A54-7BF8-485C-A08B-4E77A4EC912E(a)microsoft.com... > Gerry, > > I have repeatedly scanned my computerformalware and viruses and none of > the > scans have shown anything. The computer was also scanned with a Linux > based > program when it was in the shop for the HD replacement (under warranty) > and > when in the shop for the memory upgrade two weeks ago. The repair shop's > scan showed no malware / viruses. I am revisiting every possibility once > again to see if there is something that has been overlooked. I do things > very thoroughly and to overlook the malware / virsus possibility when > revisiting every other possibility would not be keeping to my standards. > I > even checked the devise drivers once again to make sure they are not the > cuilprit. malware and viruses will be checked again just to be > thorough - > I doubt they are there, but it is something I will continue to look into > until this problem is solved. > > I'm about to download and run Hijack This and I will post it to their > forum > and email you a copy of it as requested. > > I wish there were an error message when it freezes - it would help to have > a > starting point in where to look. I have used AOL and MSN Messenger since > I > got this computerfebruary 2005 (and on my old computer for many years) > The > problem started in september. Since the freeze started happening, I > upgraded > MS Messenger - and for a time had it off and the computer still froze so I > started using it again (sorry - forgot to mention that) I think I have it > narrowed down to NAV being the problem if it is software related > (although, > once again, everything will be repeatedly checked until I find the > solution) > > Thanks again, > > > > > > 6 N/A YOUR-03667082DE |