Random LockUp

Hey,
My computer randomly locks up. When it does I look in the task manager and explorer.exe is using all the system resources. If I end the explorer.exe process and restart it the computer returns to a working state .. I just lose a few icons in the system tray. I have run SFC but this problem has been haunting me for quite awhile. I know the temp in my computer is not the issue. Any idea's would be greatly appreciated!
Thanks
Rockit

 

Define "Lock Up ". Are you able to use the kb and mouse? I'm assuming you can because you've accessed Task Mgr. If resources are busy, that could cause a delayed response from the computer. Just to rule out malware, have a look at the stickyon the top of the Security Forum and run the suggested programs (AdAware, Spybot, RAV scan etc)

Take a good look at that process in Task Mgr, too, make sure you have iexplore and explorer.exe , no other types of spellings. Some of the bad guys use similar spellings to confuse people trying to rid their computers of the garbage.

If you are running an older system with 256Mb or less memory, the "lock ups" might just be "pauses ". How do you correct the situation? Do you have to restart?

Johanna

 

Hey,
By lockup I mean that the mouse moves but I cannot due or select anything with it. I get no responce. If I hit ctrl/alt/delete I get the taskmanager and it shows that explorer.exe is using 90% of the cpu. If I end the explorer.exe task and restart it my computer becomes useable but I lose some icons from the tray (SpyBot) to be specific. I have run all the spyware apps and have checked for viruses but this has been a problem for quite sometime. I have a AMD 500 with 390 meg of ram. It does seem to happen when I try and do to much at once. If I take my time and don't click on anything to fast it is less of a problem. Could this be because of Norton System Works 2004? I know its a hog but was wondering if somehow I was able to uninstall it and install FProt if that would help or do I just need to get a new computer. I have tryed to lean out my WinXP Pro operating system as much as possible but am still having the issue.

Thanks For Your Help
Rockit

 

Hello Rockit,

Sure, I think Norton has a great deal to do with it. In the Task Manager, add up the memory that it takes. So you either live with it, get a substitute, or get a new computer. Any newer software by and large is going to use more resources. Someone who uses FPROT can address the resource issue with it.

One way to test this for a short period of time is to turn Norton off - MAKE SURE TO TURN XP's FIREWALL ICF ON if doing this.

BTW, have you looked at your services? http://www.blkviper.com/WinXP/servicecfg.htm

Regards - Charles

 

Charles,
Yes I have visted Vipers page and diabled all the services possible .. also have used different tweaking programs and have turned off just about everything possible. Like I said I'm running VERY lean and still it wants to lockup randomly. Probably just the computer showing it's age but I thought I'd fish for any idea's since everything else is working pretty good. If I could uninstall Norton and knew my registry would be somewhat clean, I would. But I know how much junk Norton installs and think the only way to clean it out would be a complete system rebuild which I'm not prepared to do just yet. Thanks for your input!
Rockit

 

Try start~run~eventvwr.msc and check both your applications and system logs for entries that might be related.

Probably best to dump both logs and then reboot to have less possiblilties to deal with.

Any that look suspicious but don't make a lot of sense to you can be posted here. Just open the event, click the icon below the up/down arrows (sends a text copy to the clipboard) and past it/them in a reply here so we can take a look.

 

Event Viewer

Looks like I have four errors? Two under Application and two under System. I don't know how to fix them so thanks for any help you can provide.

Rockit



Event Type: Error
Event Source: ACPI
Event Category: None
Event ID: 5
Date: 8/10/2004
Time: 9:36:51 AM
User: N/A
Computer: COMPUTER
Description:
AMLI: ACPI BIOS is attempting to write to an illegal IO port address (0x4d1), which lies in the 0x4d0 - 0x4d1 protected address range. This could lead to system instability. Please contact your system vendor for technical assistance.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 52 00 ......R.
0008: 00 00 00 00 05 00 05 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: Application Popup
Event Category: None
Event ID: 877
Date: 8/10/2004
Time: 9:36:51 AM
User: N/A
Computer: COMPUTER
Description:
There was error [DATABASE OPEN FAILED] processing the driver database.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 64 00 ......d.
0008: 00 00 00 00 6d 03 00 c0 ....m..À
0010: 00 00 00 00 6d 03 00 c0 ....m..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 8/10/2004
Time: 9:41:57 AM
User: N/A
Computer: COMPUTER
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 3b 07 00 00 ò...;...

Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3012
Date: 8/10/2004
Time: 9:41:57 AM
User: N/A
Computer: COMPUTER
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 37 07 00 00 50 0e 00 00 7...P...
0008: c5 00 00 00 ca 03 00 00 Å...Ê...

 

After a complete Windows XP Pro SP2 system repair and a few tweaks I have eliminated all errors in the event viewer and am still locking up randomly. After the last lockup I checked the event viewer and there were no errors found? Is there a next step in troubleshooting this to find a fix?

Thanks Allot
Rockit

 

Couple of thoughts here.

You can usually get a pretty clean uninstall of Norton stuff by first running the uninstall from add/remove and then running Symclean to scrape out any remaining traces. Have to get the exe before you remove the protection though since you don't want to be on the net without it.

As to the original problem and if a reload of Norton doesn't help, you need more detail on what is happening. It will take some tweaking and some time but the performance monitor (the utility ships with your OS so you have it) can pinpoint exactly what is causing you grief. The Performance Monitor Wizard will make the setup and tracking lots easier.

The last one I did took a couple of weeks but we located a particular SQL counter that was causing server lock-ups and finally worked out a fix.

 

The Task Manager is indicating that explorer.exe is using the resources, so why are we uninstalling Norton? I would run an SFC before I assumed Norton was at fault, but that's just my opinion.

Johanna

 

Unbelievable

Wow .. it sure is different to use my system without any lockup's !! It's been almost a week and so far I haven't locked up once!! It use to happen at least twice a day but usually more.

I've been putting up with it for so long that I thought it was just something I'd have to live with.

What did I do to fix it???

Some of you might not like the answer but I'll give it to ya straight..

GoodBye Norton.

I just wish I would have found out sooner but I trusted Norton so never thought they would be the problem.

I've used allot of different software over the years but I never ran into anything that was as hard to get rid of as Norton. I don't think I've been able to get it all even though I've spent day's trying.

My security center still say's I'm protected by Norton even though it's not on my system anymore?

I know that some people like the Symantec stuff but even when I get a new more powerful system I won't be installing anything from them .. It's just to much work to try and get rid of and in my OPINION not worth it.

There are other software programs out there that do as good if not a better job without the bloat.

Cheers
Rockit

 

Did you run Symclean.exe after you got Norton uninstalled?

 

Hey Newt,
I ran that and three different reg cleaners.. Regedit searched out all norton and symantec stuff. Went to symantec's homepage and followed their instructions to remove norton also ran their reg file that they have posted there .. I did it all man !! And I still can't kill it!!

However it sure is nice to be able to use my computer without any lockup's.
I never thought I would be able to get this old PC running like it is now.

I'm one happy camper!!

Thanks for all the help
Rockit

 

Rockit - I know how you feel. I used Norton products for years and swore by them. By XP, I was more often swearing at them. I did a clean install of XP before loading the release version of SP2 just to make sure all traces were gone and will be doing the same to my wife's PC very soon.