Computer stops responding for a few minutes and then loads everything I clicked!

After connecting to the net on my 56k connection. I open IE and then, as I try to open another IE window or do anything else such as open messenger or taskmanager, - nothing happens. After several minutes, everything I had clicked on during those dead minutes suddenly opens all at once.
It seems like there was something running in the background which wouldn't let anything else happen until it had finished whatever it was doing.

I have McAfee Firewall and VirusScan. As I connect to the Internet, "Application Layer Gateway" pops up asking for permission to access the net. If I say no, it keps bugging me till I say YES.
I know that "Application Layer Gateway" is associated with svchost.exe and I have 4 running in my taskmanager list.
One for LOCAL SERVICE, one for NETWORK SERVICE and 2 others.

By going to command Prompt and typing Tasklist /SVC it tells me all the services running including what programs and DLLs are using the svchost.exe
Here they are:

Image Name PID Services

svchost.exe 1344 RpcSs
svchost.exe 1424 6to4, AudioSrv, Browser, CryptSvc, Dhcp,
dmserver, ERsvc, EventSystem,
FastUserSwitchingCompatability, helpsvc,
Ip6Fwhlp, Iprip, lanmanserver, lanmanworkstation,
Messenger, Netman, Nla, RasAuto, RasMan, Schedule,
seclogon, SENS, SharedAccess, ShellHWDetection, srservice,
TapiSrv, TermService, Themes, TrkWks, uploadmgr, W32Time,
winmgmt, wuauserv, WZCSVC
svchost.exe 1560 Dnscache
svchost.exe 1584 LmHosts, RemoteRegistry, SSDPSRV, upnphost, WebClient


Can anybody help me figure out whether its a program trying to access the net or if its the Firewall/AV or if its something else.

I've already tried the msconfig thing and unchecked all the boxes but it still did it. I know I don't have a virus. I really think its got something to do with svchost.exe but I don't know what I can do about it.

I have Win XP Pro and have a Wireless Network to my laptop which isn't running when this happens.

Your help is greatly appreciated,
Thanks

 

... I know that "Application Layer Gateway" is associated with svchost.exe ...

Well, sorta, kinda, in a way. If you use the ICF (internet connection firewall - companion piece to ICS) the ALG will want to run. It mainly provides support for some 3rd party things rather than direct support for ICS/ICF.

Since svchost.exe is only a wrapper/shell to run other items, it almost never is a problem in itself although pieces that run within a svchost session certainly can be. My currently runing instances (XP-pro on a 2PC router/switch network and no trace of ICS/ICF).

Code:

Image Name                   PID Services                        
============== ==== =============================================
svchost.exe     620 RpcSs                                        
svchost.exe     644 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,   
                    EventSystem, helpsvc, lanmanserver,          
                    lanmanworkstation, Messenger, Netman, Nla,   
                    Schedule, seclogon, SENS, ShellHWDetection,  
                    srservice, TermService, Themes, TrkWks,      
                    uploadmgr, W32Time, winmgmt, WmdmPmSp, WZCSVC
svchost.exe     728 Dnscache                                     
svchost.exe     740 LmHosts, RemoteRegistry, SSDPSRV, WebClient  

From the symptoms you describe I certainly agree that something is hogging CPU cycles for a while and not allowing other things enough resources to run. The trick will be to pin down exactly which one and then why.

For starters, go into services and set the AGL to disabled. It's probably manual or auto now. If you only have the one PC internet connected and use a 3rd party firewall, there is nothing essential for the AGL to do anyway.

And while you are troubleshooting, probably a good idea to have taskmanager running all the time and set to be always on top. I'd want to look at the processes first.

 

W32time???? Windows Time Service.

"Based on the setup and intervals ", Does this not try to connect to the net for time syncronization at startup or is it polite enough to poll/detect and wait for a connection?

Sorry but I am XPless at the moment. That's why I'm throwing this question out there for anyone to catch.

======
Also see windows automatic update service. If set to check for, download and install, the delay or bog in your task priority may be taking a backseat to windows task but as Newt said, watching your processes and cpu usuage should shed some light.
=======

I will bough out now as Newt is the far better person to handle this type of quest. Only intruded, on impulse, cause I vaguely remember the Win Time Service demanding some of my attention for a tweak or two but sadly, I don't remember why......

 

When I try and STOP the ALG, it starts to stop it and then it timesout before the complete stop has been made.
I disabled it and then started the computer but same problem.

I did manage to solve the problem one time when I disabled the Network bridge (MAC Bridge Miniport) (What the hells that?)
in Network Connections and then I also removed my Wireless connection from the bridge and that cured the problem of it hanging but a new problem presented itself.

IE would not display a web page no matter what I tried.
You get the usual error "this page could not be displayed "
I went into the log and found an error called IPRIP. Here are the details of that error. Ir printed the error more than a 100 times as soon as I connected.


Event Type: Error
Event Source: IPRIP
Event Category: None
Event ID: 29028
Date: 31/12/2003
Time: 19:26:45
User: N/A
Computer: XASER
Description:
IPRIP was unable to create a socket for address 213.78.161.238. The data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7a 27 00 00 z'..

There are too many things going on for me to figure out the root cause of the problem. It seems like there may be multiple problems and I have to do something about all of them.

Taskmanager doesn't seem to help coz even though I shut everything down except the critical items, it still hangs.

Any ideas or procedures you can think of which I should follow?

 

Good grief goddez1. I'm groping along here myself and I hadn't even thought about the w32time trying to synch. It is network/internet time and it certainly could be trying to reach out as soon as the PC connected. Good catch.

I'm on broadband and just never think about some of the dial-up specific stuff. w32time is great on an AD domain with a time server or two. Not bad with 7x24 broadband. But it certainly might not be the best option for dial-up.

 

Whats w32time and what do I need to do?

 

On the log, I picked up these:

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 31/12/2003
Time: 20:21:58
User: N/A
Computer: XASER
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

and

Event Type: Information
Event Source: W32Time
Event Category: None
Event ID: 35
Date: 31/12/2003
Time: 20:26:55
User: N/A
Computer: XASER
Description:
The time service is now synchronizing the system time with the time source time.nist.gov (ntp.m|0x1|192.168.0.1:123->192.43.244.18:123).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

and

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 31/12/2003
Time: 20:21:58
User: N/A
Computer: XASER
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.nist.gov,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 

Simplest would be to go into services and disable w32time.

If you want to make sure your PC is set to the exact, real, precise time you can get one of a number of freeware apps that can be set to wait until you are fully on line or until you call for an update.

Otherwise you will just notice the PC's 'people time' getting slowly ahead or behind. Usually just a few seconds a day although some do it faster. No problem - just 'adjust' the time back to something near reality.

The precise time-synch is only necessary for a 2K AD domain because in that environment, things start to fail if the PCs aren't all on the same time. For the rest of us, it ain't no biggie.

 

Thanks Newt, but There is no W32Time in Services. Only "Windows Time" exists.
It says:
Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Is this the right thing to disable? Its on Automatic at the moment.
Is this the item that will cure the PC hanging on internet connection?

Thanks

 

Also, everytime I connect, I get this in the Log:

Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Date: 01/01/2004
Time: 15:10:08
User: N/A
Computer: XASER
Description:
The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1f 00 00 00 ....

It comes up 2 or 3 times.

Any ideas?

 

Network setup? Protocol Binding? Not Networked?

Can the problems he's experiencing be based on the usual connections being done as part of a network, all the checks and sharing this involves and the fact that he is now trying to web connect solo without the "Network "?

Will these problems disappear when Networked?

This Networking stuff still confuses the heck out of me.....Now it's wireless, possibly ICS, router, laptop, modem....(my eyes are glazing over). This is the one area that causes me so much stress, I inevitably cry "Uncle" and call in the Husband.

I'd just hate to see something fooled with, now (solo connection), that will be needed when the network setup/connect is used again.

If I sound absolutely clueless and stupid, in this department, it's because I am! Pardon me while I run back to the bleachers where I can watch and learn....

 

Jetheat - Windows Time is the display name they use for w32time. Sorry, should have posted both for you. If you go into properties for the Windows Time service it will tell you it's w32time.

And yes, that is the one I think you should disable just to see if it helps.

The explanation of your 32003 error is Here. I imagine it's really a non-event with your setup since RRAS is mostly for allowing other folks to securely connect to your PC from a remote location. I'd disable Routing and Remote Access service too which should stop the error.

 

The Routing and Remote thing was disabled so I turned it on Automatic and started the service.
I turned the W32time off.

It seems to work now but there's a catch.

I think the hanging has got something to do with and is connected to NETWORKING.

I have an ad-hoc wireless network and in my "Network Connections ", I have Network bridge (Network bridge) 2 Enabled,
Wireless Network Connection Enabled and Bridged,
LAN and 1394 connections disabled.

The tooltip for the Network Bridge Icon says MAC Bridge Miniport and I think this particular icon has something to do with this problem.

I switched on the laptop so that the wireless network hooked up and then I connected to the net. It hung again. So I right clicked on the Wireless Icon and disabled it. As soon as I did that, it stopped hanging and the caption said Network Bridge unplugged.

How can I configure my Network so that it doesn't interfere with the internet connection. The only thing is I need ICS from Laptop to Desktop.

 

I've tried everything suggested but to no avail.
It's definately svchost.exe because I manged to stop the process whilst the PC was hanging and it snapped out of its Hung state.

But I have no idea what to do to cure this problem.
Any ideas.

I do know that its not a virus.

 

I've gotten the feeling that we are chasing phantoms here and really need to do a full-stop and restart from the basics.

For openers, I'm moving this to the networking section since the problem seems to be pretty much network related rather than a pure XP issue.

You mentioned that you have a wireless network with another PC using the ICS connection. I'm not sure but I think I read that when it tries to connect, you see the same hanging behavior as you do on the desktop.
- Does the desktop have the issue even when the laptop is not running?
- Does the laptop freeze/hang when it first tries to connect to the internet?
- Do you have any similar issues when moving files between your PCs?
- Did this just suddenly start where a working system went nuts or has it done this from day 1?