Freeze Problem

Hi,
I am experiencing a freeze up situation when I move from a internet program back to my Desk Top. It happens a lot, and I have to manually shut down the computer. Using Ctrl-Alt-Del doesn't do the trick. I've checked the Start Up programs and I have very few running.
Any help would be appreciated.
Larry

 

Freeze solved.

Hi,
I removed a Spyware program and that seems to have solved the freeze problem.
Thank you anyway.
Larry Opheim

 

Hi opheim1,
I see you fixed this problem all by yourself. Care to share the Spyware programs name? It may just be a setting or option that needed adjusting. Just thought that others, who may have your same problem, would benefit by knowing if they are using the same "Spyware program ".

I am happy to see that your problem is fixed and am hopeful you will return to fill in the details but regardless, "thank you for updating your post ".

 

Desk Top Freeze

Thanks goddez1 for your reply. Upon further review, it appears that the culprit may be the MOUSE. It is sporotic, so difficult to pin down. If I bang the mouse around it does un-freeze some of the time.
Larry Opheim

 

--I hate freezes that aren't kind enough to spit out an error!--
Process of elimination is gonna' have to be done. The only way your going to find out what it is, is by reducing the number things it could possibly be. Here's a few ideas off the top of my head and in no special order: (details are left out because these can be found in the Archives of past posts. If you find you need additional help or explanations on any thing you find in the archives just append to post and we will be most happy to help).

If you think it is the mouse, you got spare? What kind/brand of mouse? Lot's of mouse issues can be found depending on the brand and version software if using such.

Tried a safemode bootup and a check into "Device Manager" for problems or duplicate devices?

How long have you waited for this freeze condition to clear up. Sometimes it can take a while for the system to finally kick an error that ??? task is not responding. Once you can end the task, depending on the problem application, your system returns to normal. Possibly, unstable but system responses return to normal speed.

What start ups and background running tasks? Tried shutting down all of the non system or not needed programs and running with the bare minimum while on the net? Archives have links and suggestions for eliminating or disabling unneeded start ups.

Any pattern to this lockup or something that you can reproduce that will make this lockup happen every time?

Tried a routine maintenance house cleaning ie;
cleaning temps,
running scandisk/defrag,
virus scanned/ran spybot/hijackthis log.
Using sfc checker to check for files that may be flagged as corrupt. Important that you search the archives on this topic (sfc.exe or system file checker). Use this only as a helper and do not make any changes based on what sfc finds. Write them down and, using the search engine of your choice, check them out first. Keep in mind that your main focus is on the files sfc says may be corrupt.

Check up to see if your current on your updates both Microsoft and software/hardware.

Computer specs up to snuff for the tasks you require to be done? Ram sufficient, heat under control, age, hardware issues ie; age, brand, irq/io issues etc.

Tried searching this boards archives for "random freeze lockup" issues and the methods used for "how to pin these down" such as msconfig selective startup etc.?

IE giving you any other problems? Tried IE repair function?

Are you using an active desktop?

What are you trying to do when you switch from IE to the desktop and how are doing this?

Got tweakui (power toys) and have enable it's faultlog function? Tried Dr Watson?

==============
Well...., I hope the above list will give you some starting points. Perhaps you'll get lucky and zero in or pin this down rather early in your quest. If not the majority of these things should be done on a regular basis anyway. This is spring you know, think of it as "Spring Cleaning ".

All of the topics and particulars can be found in the archives. Sorry about the lack of detail here. These topics have been typed out and retyped out so many times, I can't seem to find the energy, this morning, to do it again. It's been a long night and this insomniac is pooped.... .

 

Freeze

Hi Goiddez1,
Thanks a lot for all of your suggestions. I will be following thru on them since I still have the freeze problem. Hope that you are catching up on your sleep.
Larry Opheim

 

Freeze

Thanks Goddez for your suggestions. I have tried several, but still have the freeze up. It seems to occur after I have been using IE, and after leaving it an AD shows up. After I X out the ad, the freeze occurs. The ad is something about excite, but it not the Excite I use for a Home Page.
Does that ring a bell.
Thanks again,
Larry

 

Freeze

I believe that it is the Internet Explorer that is the culprit. As long as I stay on IE, I can do a variety of programs, but once I X it out, and try an icon on my desk top, I get the freeze.
Any suggestions.
Thanks.
Larry Opheim

 

http://support.microsoft.com/?kbid=222131

In support of your mouse theory.....

 

Still Freezing

I am still experiencing the freeze up problem. Along with it is a bit of stalling and slowness. I've tried lots of clean up procedures but haven't corrected the problem yet. Anyone heard of Error Guard or maybe it is ERROR GARD?It popped up as an ad,and said they found 138 errors on my computer. You have to pay them to continue with the removal. Didn't know whether to trust them or not and how much that they charge. Is there a free program that does the same thing?
Thanks!
Larry Opheim

 

Why don't we see what's running on your computer? Suggest you download hijackthis.zip and place it in a folder such as c:\hjt\ and unzip it there. Then run it in normal (not safe) mode to get a log in notepad and highlight, copy and paste the entire log in a message here for the experts here to analize and suggest what else you can try. It would be a good idea to obtain adaware and spybotSD1.3 first to clean up as much as possible to make the log easier to evaluate. Be sure to update both before running them and please allow them to delete anything they find.

Edit: These are all free; do not pay for any program to do the cleaning. Especially one that appears in an ad like you described above.

 

Freeze

Here is the hijack list. Any would be appreciated!
Logfile of HijackThis v1.97.3
Scan saved at 8:21:51 PM, on 04/23/2005
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\QUALCOMM\EUDORA MAIL\EUDORA.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE
C:\UNZIPPED\HIJACKTHIS[1]\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.excite.com/
O2 - BHO: CitiUS Shared Browser Helper Object - {387EDF53-1CF2-4523-BC2F-13462651BE8C} - C:\WINDOWS\SYSTEM\BHOCITUS.DLL
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDPB.DLL
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDSG.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
O4 - HKLM\..\Run: [ErrorGuard] C:\PROGRAM FILES\ERRORGUARD\ERRORGUARD.Exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE" /Q
O4 - Startup: Kodak EasyShare software.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: Citibank Toolbar - about:<script>new ActiveXObject( "OBar.BarLauncher ").ShowBar(window.external.menuArguments, "{2db95750-6d83-11d4-bb5b-00e02956ca77} ")</script>
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Citi (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Spyware Doctor (HKLM)
O9 - Extra button: Citibank Toolbar (HKCU)
O9 - Extra button: WeatherBug (HKCU)
O12 - Plugin for .hpb: C:\PROGRA~1\INTERN~1\PLUGINS\nphpipb.dll
O12 - Plugin for .bpt: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O16 - DPF: {CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_04) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37873.3949074074
O16 - DPF: {427273CC-764E-11D3-823D-006097F90453} (Pixami Image Editor Control) - http://www.imagestation.com/common/classes/BPImageEditor.cab?ver=1,1,0,30
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://photo.walmart.com/photo/upload/XUpload.ocx
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/oemji_opt_out/SSWebInstall.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {D44C75D8-C827-473E-8F68-A77E42500782} (Uploader Class) - http://www.walgreensphotocenter.com/upload/WebUploadClient.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab

 

opheim1

Please download the corrent version of hijackthis from the hypertext link in my previous post and follow my directions. Your version is quite old.

 

This

ME TOO

Where is the problem ??? Lets not look in just one place.

This May or may not fit here. But check it out and see what fixed A LOT of problems on my machine. Including an occasional freeze up. And it was one of the biggest surprises that I have had with Windows XP.

I was having basicly the same freeze up and Mouse problems. IE ( and this BBS ) would hangup on shutdwon. I was blaming everything but the Video.

But once I replaced the Video card ALL problems left the scene

One place that I was having ALL KINDS of problems was right here on this BBS. Lockups. Boxes with little red Xs in them. Mouse would only work in certain places. Many times I could not do a REFRESH and would have to restart WINDOWS itself.

I have also fixed the freeze up problems on another machine with 98 on it by CHANGING video drivers. I actualy wound up with OLDER drivers before the problem was fixed.

Sometimes the problem is other than where we look for it.

One thing that I see in your HiJack this log that did cause me problems some time ago. That being EUDORA loading at startup. ( or running in the background )

BillyBob

 

Hi opheim,
(Please don't let the below observations or comments, muddy the water or distract you from your current plan of attacking this problem. I'm just throwing a few things to ya' so you can keep them in mind as potential problems that may need further investigation. I don't want to side track you and as "one who is extremely easily sidetracked herself" I thought I'd start this thread with this caution or disclaimer (for lack of a better description).
-----------------------

Ut oh! Sorry, no one caught you or pointed out that "Errorguard" may have been a bad idea. See Google's take on this and judge for yourself.:
http://www.google.com/search?num=50&hl=en&lr=lang_en&q=errorguard&btnG=Search

This boards database of past posts probably has information on this. I haven't looked but I will as time permits.....

Again, I'm sorry but better late than never. In any case, continue along the path you are now on ie; "Spyware/malware/hijackthis ". One of our smart, sharp, experts, in this field, would have and will point you in the right direction for removing critters you shouldn't have. They will be familiar with this program and can confirm whether it is "a good thing" or "a bad thing ".

The only other thing I can see right away is "Stimon ". This has been known to cause problems with many, when allowed to run in background or load as a startup. There are probably a few of other apps and services you have, going on in the background, that doesn't need to be, and is known for "not playing well with others" but I'm not familiar with them. Have faith. Other members more familiar with them will catch them. Hang in there.

Additional comment:
I see you have an ms security update running "Kb891711.exe ". This update comes with it's own set of minor problems. See:
http://support.microsoft.com/default.aspx?scid=kb;en-us;891711

The above may apply to you but again, judge for yourself. I think I've seen past posts where members have had problems with this update, vague memories but this rings a bell. I'm not suggesting that you uninstall this update but am only pointing it out for further investigation as another possible "nuisance freeze" suspect.

Ah hah! I thought so. Here's a past post on this:
http://www.windowsbbs.com/showthread.php?t=42672

Hmmmm, LoadPowerProfile should be listed twice. Perhaps this is the way or the keys hijackthis lists. May not be a problem but just a curiousity on my part. I don't see any entry for [ScanRegistry] c:\windows\scanregw.exe /autorun. This could be "a very bad thing ", meaning no registry backups to fall back on. Wonder why it's not..... Are you using a normal startup or are you still using a modified msconfig startup?

EasyShare: A starting point for elimination of at least one of your startups....
http://startup.iamnotageek.com/srch-EasyShare.exe.html
Not needed as a startup. Can be ran when you choose to.

---Personal gut feeling, is you've got an application problem, better known as "One of these guys does not like the others "---
I see you have software that seems to involve a lot of IE integration (via plugins) and co-operation. I assume, most, involve photo or file sharing, uploading of these etc. (possibly exception is citibank). That leaves the "window of trouble and opportunity" wide open to possibilities with these 3rd party apps. Combined with and dependant upon versions and used in combination with the onslaught of MS security updates, (which can vastly effect/alter any application behavior), perhaps a deeper look into these and a visit to any support site they may offer, should be done. Your goal is to look for potential patches, upgrades or cautions/redflags when it comes to known lockups/freeze problems or any problems that crop up after a Microsoft update is applied. BillyBobs "video/graphic/display drivers" suggestion would certainly tie into the mix here. That's another thing to consider.

With plugins in mind, it couldn't hurt to have a look at the condition or status of these via IE's toolbar>Tools>Internet Options>General tab>Click on the "settings button>Click on the "view objects ". Any problems noted, with these buggers, should be taken care of.

 

Freeze

Hi,
Tried to use adaware like Sparrow suggested, but they were going to charge me $29.95 to remove the 400+ bad items.
Have lots of suggestions to try now so will work on them.
Thanks to you all!
Larry Opheim

 

400 bad items You definitely need to followup on the plan suggested. Critters are running amuck!!

You may have tried downloading and using the Professional or Plus edition's of adaware, The Personal version is free. See:
http://lavasoft.element5.com/support/download/#free

Go to our Security forum's sub forum, "Removing Spyware & Viruses" and read the sticky pinned to the top of the forum. You may find the links and directions helpful and a bit easier to understand.

Forum:
http://windowsbbs.com/forumdisplay.php?s=&daysprune=2&f=41

Sticky:
http://windowsbbs.com/showthread.php?t=37074

 

Hello again opheim1,

For a little preview and review, I see at least aim, backweb and wheatherbug.exe shananagins going on or at least what remains after adaware and spybot. These probably come accompanied with popup ad buggers. See: (purely for your F.Y.I.) Don't proceed to clean up by yourself at this point:
http://www.pchell.com/support/weatherbug.shtml

I am about to suggest to the moderators that this part of your post now be edited and your hijackthis.log and cleanups be moved or relocated to the security forum. This board has some of the best people you can find on the net, advising and helping to catch and cleanup after critters that can be caught on the net. I will continue to peek in your post and see how your coming along on but others are better equipped and familiar with this type of cleanup and they should take over from here.

To Mods:
I think this now needs a relocation to the "Removing Spyware & Viruses" Forum. I've become so far removed and unfamiliar with the signs, program-combos and symptoms of malware infections that I'm unsure if this is a case of the normal cleanups or something that requires a deeper cleaning. What do you think?

 

Agree with goddez, and also would eliminate the kodak items at startup (one of which appears to contain backweb); they can be run from the program menus as required.