1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

System Crashing with minimal use

Discussion in 'Windows XP' started by NOrmsby, 2006/08/08.

  1. 2006/08/08
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    I thought I had an overheating problem because my fan comes on at high speed most times now. I got a new fan and did the necessary with the cooling paste, etc and that seemed to be okay (6 months ago) but really only the new cleanliness was what brought the temperature down a little. So here's what the problem actually is and if anyone can shed any light on this, I would be so grateful. Thanks in advance for looking.
    I am running an HP t3060uk desktop 200GB hard drive Pentium4 ht technology 1GB DDR RAM ( i think the processor speed is around 3200 ), a fairly powerful machine for ordinary home usage. I do not run any games or high end video, just the usual media. My system has been errratic for some months now and usually always crashes after approx 20-30mins usage on the net (internet explorer, via ntl cable broadband lan). If watching video clips etc then it is much quicker to crash. After the customary report to Microsoft, their online crash analysis reports suggests either Insufficient Memory or an Unkown Device Driver. Sick of the problem now, I looked at some threads in BBS and it is suggested that it is probably a software problem. So I have done the suggested things and, to be brief, I have tried Everest, Ewido, Registry Mechanic (and more) and it seems like I have lots of issues. eg, 122 software issues, 60degrees celcius on the CPU 35c on the motherboard. When I look in task manager the CPU usage runs at 100per cent when watching a video clip or even just opening up two or three pages at the same time. I am so confused now I do not know if this is still a hardware problem or, in fact, a software issue relating to a virus or what? I have Panda platinum running constantly and do regular scans which gets rid of any infections - i think. I also do regular disk clean ups, defrag and any other usual maintenance like all the updating, etc.
    So, what I am basically saying is that the puny little machine upstairs with less than a third of this machine's spec is much faster and never crashes.
    Can anyone please help me?? I am not very experienced but can find my way around reasonably well. Any information from anyone with similiar problems would be great. Thanks again, in advance., Neil.
     
  2. 2006/08/09
    Rockster2U

    Rockster2U Geek Member

    Joined:
    2002/04/01
    Messages:
    3,181
    Likes Received:
    9
    Neil:
    Its tough to know just where to start but a couple of your comments may provide some insight.
    A few observations and comments:

    The link between replacing your HSF and your problems may be coincidence but I'd suggest pulling the HSF and cleaning up exisiting thermal paste and replacing with Artic Silver. You should also make sure the cooling capacity of your HSF is matched to your processor or if in doubt, replace it with something that is.

    Set your browser cache to 80Mb and clean files (including offline content) and history. Set history to 0 days.

    Search the web and download Cleanup! - In the options menu, leave everything at default except take the checkmark out of remove cookies. Run this utility.

    Go to driverguide's website and run their analysis, then update the drivers they recommend.

    Head over to the malware forum and follow directions for cleaning and then post a HiJack This log, asking for some help and assistance.

    Cleaning up whatever ails you could be a long, slow process but I'm sure that there are some people here who can help.

    ;)
     

  3. to hide this advert.

  4. 2006/08/09
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    thanks for your suggestions. Here's a quick update : I will try Arctic Silver in a few days once I get my hands on some - have ordered. Used Cleanup but it made no difference. Used Driverguide but it did not recommend update of any drivers. Not sure how to do the Hijacks so I'll leave that for now.
    Unchecked all in Startup tab of msconfig - still no difference. The regedit bit is a bit more complicated so have also left this for now, although I did try!.
    The problem happens after boot up not during. It seems as if it is only happening when I am on the net, ie using internet explorer, my cpu usage is almost flat out when moving between pages and jumps up to 100per cent just looking at certain clips on the home page. Just a final point, the new fan and hs is identical to the original installation so matches perfectly - like I said previously the problem was apparent before replacing the fan and hs, I only did this as a point of elimination in my quest. looking in task manager while I am doing this shows 0-4pc CPU usage and 467MB PF usage. When I drag the window it jumps up to 18pc. Opening home page from here it jumps up to 58pc and remains there. If I open another page it will probably crash so I'll leave that for now so that I can finish this. Thanks again.
     
  5. 2006/08/09
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Straightforward :) ....

    Please download HijackThis through Quicklinks in my signature and save it to a folder on your hard drive, say C:\HJT - not to the Desktop or a temporary location. When entries are fixed with HJT a backup is made to the folder from which HJT is run and this must be in a permanent location.

    Open the folder in which you placed HJT and double click on hijackthis.exe and select Scan and save a log file - this will be saved in the folder from which you ran HJT.

    Post the log here.
     
  6. 2006/08/09
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    Thanks, I think I have done this right?
    Here is the report:Logfile of HijackThis v1.99.1
    Scan saved at 19:44:21, on 09/08/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\InterVideo\Common\Bin\WinRemote.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\WINDOWS\ALCWZRD.EXE
    C:\WINDOWS\ALCMTR.EXE
    C:\WINDOWS\AGRSMMSG.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\ntl\broadband medic\bin\mpbtn.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\SRVLOAD.EXE
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
    C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AVENGINE.EXE
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\WebProxy.exe
    C:\Documents and Settings\HP_Owner\Desktop\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ntlworld.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe "
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Inicio.exe "
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe "
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe "
    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE" /s
    O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKLM\..\RunServices: [PANDA ANTISPAM SERVER SERVICE] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PasSrv.exe "
    O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\HPQ\XPXWWPP5\plugin\bin\PCHButton.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: broadband medic.lnk = C:\Program Files\ntl\broadband medic\bin\matcli.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1155007960250
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155008069359
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Panda Antispam Server Service (PASSRV) - Unknown owner - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
    O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
    O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
    O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
    O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
    O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
    O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
    O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
    O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007.SP1\RpcSandraSrv.exe

    Hope this can help shed some light on the problem.
     
  7. 2006/08/09
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    here is a further log as I think i saved to a temp file first of all. It is now in a seperate folder. Logfile of HijackThis v1.99.1
    Scan saved at 20:30:02, on 09/08/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\InterVideo\Common\Bin\WinRemote.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\WINDOWS\ALCWZRD.EXE
    C:\WINDOWS\ALCMTR.EXE
    C:\WINDOWS\AGRSMMSG.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\ntl\broadband medic\bin\mpbtn.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\SRVLOAD.EXE
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
    C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AVENGINE.EXE
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\WebProxy.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\hjt\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ntlworld.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=Q105&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe "
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Inicio.exe "
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe "
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe "
    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE" /s
    O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKLM\..\RunServices: [PANDA ANTISPAM SERVER SERVICE] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PasSrv.exe "
    O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\HPQ\XPXWWPP5\plugin\bin\PCHButton.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: broadband medic.lnk = C:\Program Files\ntl\broadband medic\bin\matcli.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1155007960250
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155008069359
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Panda Antispam Server Service (PASSRV) - Unknown owner - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
    O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
    O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
    O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
    O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
    O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
    O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
    O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
    O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007.SP1\RpcSandraSrv.exe

    Sorry for trying your patience.
     
  8. 2006/08/09
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    Just a further thought. I will have the Arctic Paste 5 by the weekend. Prior to removing the fan and hs which is the P4 square type with screws directional to the board, i.e., you cannot twist the hs on application, should I possibly be using a pad instead of the paste???? What is the best way to re-install the hs/fan assembly for best reults with the thermal paste (Arctic Silver5)???? Thanks again.
     
  9. 2006/08/10
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    I'll try to put a few suggestions.

    There are instructions for applying ArcticSilver 5 at their website.
    www.arcticsilver.com
    Read through them. The main aim is to apply the thinnest layer of compound possible and avoid trapping air bubbles. If you apply a very thin, even layer, you may be able to "wiggle" the heatsink slightly to expel any trapped air. Check the instructions.

    -----------------------------------------------------------------
    I see you have Realplayer installed, try uninstalling it. I have found it can be a real mischief maker. EDIT:backup your system first, the last time I tried to uninstall Realplayer, it ended up as a complete format and reinstall of Windows (!!)

    If the other suggestions don't work, look at uninstalling the Panda suite, then try using the internet (don't do anything that will put your system at risk, just say, visit here and open 3 or more windows).

    Pete might be checking your log/s, maybe he will reply soon.

    Matt
     
    Last edited: 2006/08/10
  10. 2006/08/10
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    You log checks out clean - no problems there that I can see.
     
  11. 2006/08/10
    Rockster2U

    Rockster2U Geek Member

    Joined:
    2002/04/01
    Messages:
    3,181
    Likes Received:
    9
    Nothing monumental but looking at your logs, It appears that you may have both Acrobat Reader 6.0 and 7.0 pieces on there. I'd make sure 6.0 is uninstalled as there is a 6.0 Browser helper object running even though you have 7.0 installed. Also, and of greater potential consequence, empty your java bin or temp files and downlaod a newer version of java then uninstall that antique you are currently running - this has some security issues too.

    General recommendation - Michael Lin wrote a very slick little program called StartupCPL which runs out of the control panel and can be used to disable various programs from running at start up. Google it, download and install it. From my take, you have a lot of un-necessary programs running at startup. Both with regard to automatic updating for several applications and various monitoring applications. I am unfamiliar with all of the features of the Panda software you are running but one of my first suspicions would be that its security features may be blocking some of your un-necessary auto-updaters and causing you some problems. Sometimes these things don't play well together. You should be able to take every one of your startup entries, search it on google or at something like bleeping computer and make a determination as to whether or not it is necessary to have running at startup. With StartupCPL, you can just uncheck the associated entry and disable it from running at startup, then reboot and the change is locked in. If you decide you do want something or change your mind, just go back in and check it - simple, effective way to clean things up and minimize the resource load without having to uninstall or permanently remove anything.

    ;)

    edit: follow Matt's link to Artic Silver religiously. Paste is much better than pad and clean the old stuff off with a QTip before applying the new.
     
    Last edited: 2006/08/10
  12. 2006/08/10
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    Hello again folks, thanks for all assistance. Bear in mind I haven't got the Arctic Silver yet, so this is just an update :
    I removed Real Player completely from my system and removed all components of Acrobat 6.0. Latest version of Java is now installed and the old one removed. I tried a task manager test after each process and no great difference is seen except that the PF usage has fallen to around 300. I then uninstalled Panda (as it is now) and results are quite dramatic. It is stable at the moment on the BBS pages using 1% CPU usage and 156MB PF usage. When I go into my home page and open it up (12 seperate pages) CPU usage settles at 50-53% and PF usage is 399MB. Looks like the problem may with Panda Platinum???????? I'll need to re-install it for the time being for security and once I get the paste and install I'll get back and let you know. In the meantime, if anything jumps out of this and clicks with you, please let me know. Thanks again, Neil.
     
  13. 2006/08/10
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    Not necessarily, but I would think it should have safeguards to stop this happening. Since you have reinstalled it, the problem has returned?

    Rockster2U mentioned using StartupCPL to disable those update programs at startup. You may find that the firewall is blocking the update program, but the update program keeps trying to contact it's home websever, causing the high CPU usage.
    If you open the main programs for those startup items, like Adobe Reader, Itunes, Lexmark, Intervideo, etc (the 04 headings), you should be able to get them to stop running their update services and only run them when you think you need to, for example, I would update Adobe Reader if I was to get any errors that it could not run certain fonts, etc. The 04 headings also include things that run in the background and have icons in your system tray, so don't expect that they are all updating services.

    Two other things I have just thought of. The Panda program should check, but have you disabled Windows built-in firewall? Two firewalls running at the same time I might suspect could cause this. The other one is if you are using a router it will probably have a built-in (NAT) firewall. See if you may have more than one firewall running.

    Matt
     
    Last edited: 2006/08/11
  14. 2006/08/11
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    Hi again, guys. Dramatic changes! Firstly, I am presently only running in selective start up with only the required bumph to get the machine up and running. I only have the Panda Firewall running, Windows Firewall is disabled. I also tried running without the Router attached, but no difference there so I dont think it has any Firewall attached. Now here's the changes as of today - and I now think this is the root of all the cause.
    I got the Arctic Silver 5 today and followed the website instructions meticulously - using only the amount ( a grain of rice ) suggested. Result, computer would not boot up! Tried a few times ( I know about the run-in period ) but to no avail. I had my doubts about the amount applied so I took the HS off again and the spread on the chip was only around 10%, I applied a great deal more and have now got the machine running but the CPU temperature sits around 53degrees and shoots up to 72-73degrees when I open my home page - with the resultant fan coming on full blast! I am a bit apprehensive as to open any further pages to test because I know this is too hot and it will probably crash. There must be a problem with the application of the Arctic Silver/HS. It is impossible to completely twist the HS atop the CPU because of this P4 design but I did manage a little. To my mind a Heat Pad would seem much more effective and much easier to apply?????????
    Any thoughts/advice on this would probably solve all my problems. Just a further thought, should I give this the suggested 200hours run-in or should I act immediately given that the temp is so high??? As I am doing this the CPU temp is at 54degrees and the Motherboard at 35degrees. Do you agree that this looks like the root of all the problems????? Thanks again.
     
  15. 2006/08/11
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    Hi, again. I've been looking into pentium4 ht processors on the Intel website just really trying to find operating temps, etc. I stumbled uopn the FACT that ALL Pentium 4 processors are shipped with a grey coloured Heat PAD. I've a funny feeling that this was the case on the original removal of my HS months ago and I removed it because everybody recommended the thermal paste to be better than a pad. It would seem to me that a pad is much better for this assembly and that may just be the reason why intel use it????
     
  16. 2006/08/11
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    No - the pad is a practical solution which can be supplied ready applied and is foolproof. I doubt you have a problem with your second application of Arctic Silver - I have used it without a problem.
     
  17. 2006/08/11
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    pad or paste

    Thanks Pete, are you suggesting that I try again with the Arctic Silver??
    If so, can you give me any further advice on application. I consider myself quite dexterous and capable of most practical problems so I thought what I had done ( at least initially ) with the small amount was by the book, so to speak, and the machine wouldn't start. Perhaps I should try a little more than intially but not as much as the second aplication?????
     
  18. 2006/08/11
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    On the one occasion that I removed a heat sink which had originally been fitted using the OEM pad supplied ready fitted (AMD) I noticed that the thermal compound had spread to show around the edge of the CPU, i.e. 100% coverage.

    When I fitted the heatsink back onto the CPU I applied a thin coating of Arctic Silver with a finger over the whole surface of the CPU and clamped the lot up - no overheat problems at all. The CPU ran at 25 deg C, rising to maybe 35 deg C when pushed. Mind you it was running AMD's Cool'n Quiet which runs the CPU only as fast as is necessary for the current load.

    If you are confident that you gave an even coating of AS across the CPU I would be inclined to leave well alone.

    I have a sneaky feeling you may have a problem in the CPU, maybe not transmitting the heat out to the heat sink because of an internal air gap oe whatever. Pure conjecture on my part :)

    Have you checked out the core voltage which the CPU is running at - can't readily see any info in the thread.

    Use Everest in Matt's signature and go Computer > sensor and post all voltages.
     
  19. 2006/08/11
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    It usually takes a few tries before you get the technique of applying the compound just right (my first time was about 4 retries). When you startup, go into the BIOS and check the temperature readout, or read it as soon as you get to the Windows desktop. Don't be afraid to remove it and start again.
    Yes, that's what you will be aiming for. You want the thinnest, evenly spread layer possible, just enough to carry the heat across the gap between the metal surfaces.

    Pete's right. The thermal pads are for convenience. ArcticSilver is about the best thermal conductor you can get. You should find that when you get the application technique right, the CPU will run very cool.

    As I said, don't be afraid to clean it off and try again. Once you find the correct application technique, it will seem easy (long grain rice or short grain? :D )

    Matt
     
  20. 2006/08/11
    NOrmsby

    NOrmsby Inactive Thread Starter

    Joined:
    2006/02/14
    Messages:
    33
    Likes Received:
    0
    Thanks again folks. Ok, I've applied the paste again (a further two attempts) and it appears to be quite stable. Temp is sitting at 53-54degrees as I'm typing this. When I open home page it rises to around 70degrees and the fan kicks in at full tilt. I suspect it's still running too hot. I have Everest (trial version) installed so here are the voltages :
    CPU CORE 2.20v
    +3.3v 3.30v
    +5v 5.03v
    +12v (trial version)
    5VTR 4.95v
    VTR 3.39v

    Seems like mission back to square one!
     
  21. 2006/08/11
    Rockster2U

    Rockster2U Geek Member

    Joined:
    2002/04/01
    Messages:
    3,181
    Likes Received:
    9
    I think you'll find a grain of rice i the correct amount for an AMD K7 processor but you'll come up way short trying to cover a P4 with that. Run a steady bead the thickness of a fat grain of rice from one edge to the other and then spread this across the entire processor with the edge of a credit card or something similar. I use a supply of thin plastic wallet size calenders to do the spreading. As to wiggling or rotating the CPU afterwards - never - that is one of the worst things one can do. From the sound of things, going from mid 50's to mid 70's, you may have a problem with the heatsink itself or the fan. I'd be more inclined to get a better HSF because no matter whats running when you go to your home page, this type of heat swing is abnormal. You shouldn't experience this type of swing even when you are running a torture test at 100% CPU load for an extended period of time - makes me question the HSF itself. Very good aftermarket coolers can be had for $20-30 and $40 buys you top shelf.

    I'd still like to see you cleanup some of the un-necessary stuff you are running at startup. This doen't mean uninstall it, just disable it from running at startup - you can always call a program up manually.


    ;)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.