1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

freezing laptop

Discussion in 'Windows XP' started by pcornall, Feb 8, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. pcornall

    pcornall Thread Starter

    Joined:
    May 21, 2002
    Messages:
    103
    I've got a packard bell laptop with 1800Athlon processor and 352Mb RAM running WindowsXP. I have two problems - 1. The computer fairly reguarly completely freezes and there is nothing I can do except turn it off. I haven't installed any new software or hardware recently. I don't know how to find out what's causing this, so any help/advice would be appreciated.
    2. On start-up my usual background isn't display + none of the program icons - there is just a blue screen with the taskbar at the bottom. If I then open IE for example, it will freeze and I have to close it using task manager - then a minute or so later all the icons will reappear on my desktop. Again, any help is much appreciated.
     
  2. Del

    Del

    Joined:
    Aug 31, 2001
    Messages:
    3,452
    Go to http://www.lurkhere.com/~nicefiles/ :

    Download StartupList 1.51

    After unzipping the file, run it. You will see a text file displayed. Copy/paste the file directly to a reply. To copy/paste, when the file is open, click Edit>Select All > Edit > Copy and then right click on a reply window here and select "paste".
     
  3. pcornall

    pcornall Thread Starter

    Joined:
    May 21, 2002
    Messages:
    103
    StartupList report, 10/02/2003, 17:17:11
    StartupList version: 1.51
    Started from : C:\DOCUME~1\Paul\LOCALS~1\Temp\Rar$EX00.704\StartupList.EXE
    Detected: Windows XP (WinNT 5.01.2600)
    Detected: Internet Explorer v6.00 (6.00.2600.0000)
    * Using default options
    ==================================================

    Running processes:

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\slserv.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\System32\ESB.exe
    C:\WINDOWS\System32\FNF22k.exe
    C:\WINDOWS\System32\S3hotkey.exe
    C:\WINDOWS\System32\S3tray2.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\soundman.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\PROGRA~1\NORTON~1\navapw32.exe
    C:\WINDOWS\System32\kernel32.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\program files\gatinst\trickler_bic_dopewars_3202.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\WinRAR\WinRAR.exe
    C:\WINDOWS\sllights.exe
    C:\DOCUME~1\Paul\LOCALS~1\Temp\Rar$EX00.704\StartupList.exe

    --------------------------------------------------

    Listing of startup folders:

    Shell folders Startup:
    [C:\Documents and Settings\Paul\Start Menu\Programs\Startup]
    Check For Dope Wars Updates.lnk = C:\Program Files\Dopewars\WiseUpdt.exe

    Shell folders Common Startup:
    [C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
    AOL 7.0 Tray Icon.lnk = C:\Program Files\AOL 7.0\aoltray.exe
    ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe

    --------------------------------------------------

    Checking Windows NT UserInit:

    [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    UserInit = C:\WINDOWS\system32\userinit.exe,

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    ESB = C:\WINDOWS\System32\ESB.exe
    FNF22k = C:\WINDOWS\System32\FNF22k.exe
    S3hotkey = S3hotkey.exe
    S3TRAY2 = S3tray2.exe
    SynTPLpr = C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    SynTPEnh = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    SoundMan = soundman.exe
    cFosInst_Check = "C:\WINDOWS\cFosOEM\cfosinst.exe" -install -inplace -checkisdn
    RealTray = C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    NAV Agent = C:\PROGRA~1\NORTON~1\navapw32.exe
    KERNEL32 = kernel32.exe
    QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
    Trickler = "c:\program files\gatinst\trickler_bic_dopewars_3202.exe"

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

    KERNEL32 = kernel32.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    CTFMON.EXE = C:\WINDOWS\System32\ctfmon.exe
    msnmsgr = "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    IDMan = C:\PROGRA~1\INTERN~2\IDMan.exe /onboot

    --------------------------------------------------


    Enumerating Browser Helper Objects:

    (no name) - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
    (no name) - C:\Program Files\SuperBar\SuperBar.Dll - {136A9D1D-1F4B-43D4-8359-6F2382449255}
    NAV Helper - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
    (no name) - C:\Program Files\Microsoft Money\System\mnyviewer.dll - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC}

    --------------------------------------------------

    Enumerating Task Scheduler jobs:

    Norton AntiVirus - Scan my computer.job
    Symantec NetDetect.job

    --------------------------------------------------

    Enumerating Download Program Files:

    [sys Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\PCPitStop.dll
    CODEBASE = http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB

    [{11111111-1111-1111-1111-111111111111}]
    CODEBASE = http://usa-download.nocreditcard.com/download/newdial-erp/2736/dialer.exe

    [DiskHealth Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\CONFLICT.1\diskhealth.dll
    CODEBASE = http://www.pcpitstop.com/pcpitstop/diskhealth.cab

    [Update Class]
    InProcServer32 = C:\WINDOWS\System32\iuctl.dll
    CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37636.4016087963

    [MSN Chat Control 4.5]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\MSNChat45.ocx
    CODEBASE = http://fdl.msn.com/public/chat/msnchat45.cab

    --------------------------------------------------
    End of report, 5,748 bytes
    Report generated in 0.581 seconds

    Command line options:
    /verbose - to add additional info on each section
    /complete - to include empty sections and unsuspicious data
    /full - to include several rarely-important sections
    /force9x - to include Win9x-only startups even if running on WinNT
    /forcent - to include WinNT-only startups even if running on Win9x
    /forceall - to include all Win9x and WinNT startups, regardless of platform
    /history - to list version history only
     
  4. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    You have a virus, maybe Badtrans.

    It's evident from the two instances of this one:

    KERNEL32 = kernel32.exe

    Kernel32.exe is not a Windows file.

    Go to Start > Run > Msconfig, and uncheck BOTH instances of Kernel32 on the Startup tab.

    Click OK, close Msconfig, and reboot.

    Now do a Find Files for Kernel32.exe and delete it.

    Do NOT touch Kernel32.dll, as this is a core Windows file.

    Additionally, running a online scan at Trend Micro HouseCall or Panda Active Scan would be useful.

    Finally, you have some spyware. Run SpyBot S&D or Ad-Aware 6.0 with the latest definitions to get rid of that.
     
  5. pcornall

    pcornall Thread Starter

    Joined:
    May 21, 2002
    Messages:
    103
    Thanks - I've got rid of the bad kernel stuff, run the anti-virus, and got rid of the spyware. The problem I was having on start-up seems to be resolved now. However, the laptop is still freezing (almost everytime I use it some point). I haven't installed any new hardware. The only obvious thing I can find wrong is an icon in my taskbar that says "Local Area Connection a network cable is unplugged" when I hover over it. I don't know if this has anything to do with the freezing...
     
  6. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    I'd start by going to Internet Options and press "delete files". Also clear History.

    And you should upgrade to IE 6.0 SP1. That will update a lot of important system files.
     
  7. pcornall

    pcornall Thread Starter

    Joined:
    May 21, 2002
    Messages:
    103
    Okay, I have done those things now. However, it just froze yet again (about the sixth time tonight)...
     
  8. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    You have two other files starting up and running I'm not sure about:

    ESB = C:\WINDOWS\System32\ESB.exe
    FNF22k = C:\WINDOWS\System32\FNF22k.exe

    Could you find both of those files in C:\WINDOWS\System32, right click them, choose properties, and tell us what information is displayed there, please?
     
  9. pcornall

    pcornall Thread Starter

    Joined:
    May 21, 2002
    Messages:
    103
    okay, no problem,
    -esb.exe is something called "media easy start button". I think it was automatically installed for some reason.
    -fnf22k.exe is an application, but the properties don't give any further details. I've no idea what it is.
     
  10. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    I'm not too fond of completely unknown applications starting up.

    I'd go to Msconfig > Startup, and uncheck FNF22k. If it should be required after all it can always be re-checked.
     
  11. pcornall

    pcornall Thread Starter

    Joined:
    May 21, 2002
    Messages:
    103
    hmmm, sounds wise. Will do. Thanks for all your help by the way.
     
  12. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/117679

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice