Lockup on Windows ME

[bilnrobn]

Every now and again my computer just locks up. It did it a few minutes ago, (I was writing an e-mail using OE at the time). There is no error message and Ctrl/Alt/Delete doesn't do anything. Neither does any other key, it is as though the keyboard is suddenly not connected. I have tried leaving the computer for a while to see if some process is running and it will right itself, but it never does and I have to resort to the off button on the CPU.
Anyone have any suggestions?

 

[MadDogMugsy]

... a few
checklist first
- have you deleted all of your temp files?
- what operating system do you use?
- have you updated all of your Windows operating system files?
- do you run an anti-virus program?

... then we should check to see what is running at boot
Go to http://www.lurkhere.com/~nicefiles/
download StartUpList and post your results here ... we'll have a poke at it

... after that, I am sure you will be directed to run SpyBot (from same site) and/or AdAware and see if you have any unwanted hitchhikers

let us know your progress
cheers
MDM

 

[bilnrobn]

Thanks MDM, here is the info you requested...
I deleted temp internet files about a week ago.
Operating system is Windows ME
Windows files... I have BigFix and it lets me know of patches and updates as they occur. There is nothing outstanding.
Anti-virus is Norton
I have Ad-aware to clear hitchhikers.

Here is the listing...

StartupList report, 31/01/2003, 7:16:27 AM
StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST151[1]\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\PELMICED.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\PRINTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\SKDAEMON.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\GENIUS NETSCROLL + SERIES MOUSE\MOUSEELF.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 4\CREATECD\CREATECD.EXE
C:\WINDOWS\SYSTEM\SKSMAILD.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\BIGFIX\BIGFIX.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVW32.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\STARTUPLIST151[1]\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Billminder.lnk = C:\QUICKENW\billmind.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
BigFix.lnk = C:\Program Files\BigFix\BigFix.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
GDRIVE = C:\IBMTOOLS\IBMBOOT\GDRIVE.EXE -N
Mouse Suite 98 Daemon = PELMICED.EXE
Hidserv = Hidserv.exe run
LexStart = Lexstart.exe
LexmarkPrinTray = PrinTray.exe
NAV DefAlert = C:\PROGRA~1\NORTON~1\DEFALERT.EXE
Norton Auto-Protect = C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
PCRecSA =
Xicon =
Norton eMail Protect = C:\Program Files\Norton AntiVirus\POPROXY.EXE
LoadQM = loadqm.exe
Hot Key Kbd Daemon = SKDAEMON.EXE
QuickTime Task = C:\WINDOWS\SYSTEM\QTTASK.EXE
mouseElf = C:\Program Files\Genius NetScroll + Series Mouse\mouseElf.exe
Adaptec DirectCD = C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
TkBellExe = C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
New.net Startup = rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup
CreateCD = C:\PROGRA~1\ADAPTEC\EASYCD~1\CREATECD\CREATECD.EXE -r

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
Xpagent =
igwsvc =
ScriptBlocking = "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

msnmsgr = "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 23/1/2003, 7:54:24)

[Rename]
NUL=C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
NUL=C:\PROGRA~1\MESSEN~1\MSGSLANG.DLL
NUL=C:\PROGRA~1\MESSEN~1\RTCIMSP.DLL
C:\WINDOWS\SYSTEM\RTCDLL.DLL=C:\WINDOWS\SYSTEM\TBM6176.TMP

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET PATH="C:\WINDOWS\SYSTEM";C:\WINDOWS;C:\WINDOWS\COMMAND
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - (no file) - {665ACD90-4541-4836-9FE4-062386BB8F05}
(no name) - C:\Program Files\NewDotNet\newdotnet4_50.dll - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E}
(no name) - c:\windows\downloaded program files\googletoolbar_en_1.1.66-deleon.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Virus Scan.job
Live Update 1.job
Symantec NetDetect.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52...apple.com/qt505/us/win/QuickTimeInstaller.exe

[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[MSN Photo Upload Tool]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNPUPLD.DLL
CODEBASE = http://photos.msn.com/r/neutral/controls/MsnPUpld.cab?4,0,1323,0

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #2: C:\Program Files\NewDotNet\newdotnet4_50.dll
Protocol #1: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL
Protocol #2: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL
Protocol #8: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL
Protocol #9: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL

--------------------------------------------------
End of report, 7,114 bytes
Report generated in 1.065 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[steamwiz]

THe first thing you Must do is go to controlpanel\add-remove programs and uninstall newdotnet - before running spybot

steam

 

[steamwiz]

An extract from the below link :-

remove Ad-aware version 5 entirely. Using it in its current, unupdated form can be, and has been proven to be dangerous.

http://www.spywareinfo.com/newsletter/archives/december-2002/12252002.php

Wait for version 6.0 free to become available

 

[steamwiz]

You have way too many programs running at start-up

Your system resources are probably running very low and this could be causing your lockups

Go to start\run and type in msconfig and click the startup tab

Now go to this link and use it to help you decide which items you can untick

http://www.pacs-portal.co.uk/startup_pages/startup_full.htm

After unticking as many as you can - reboot and these programs will then not load at startup - your system resources will be higher and hopefully no more lockups

I don't see a firewall in your startup - do you have one ?
For your safety it is essential that you have one - there are plenty of good free ones.

steam

 

[bilnrobn]

Dear Steam,
Thanks so much for all your help. You are a gem!
Re Newdotnet. Do you mean New.net Domains 4.5?
I am nervous of removing anything when I am not quite sure about it!

 

[steamwiz]

Yes that's the one

Then run spybot - you probably know how - but here it is again

Please Download and install SpyBot,

http://www.lurkhere.com/~nicefiles/

click the online tab to search for and download the updates, then shut down and relaunch SpyBot.

Go to the Settings tab > File Sets, and uncheck 'System Internals' and 'Tracks' .
These aren't needed for our present purpose, and you can always experiment with them later on.

Finally, after closing down Internet Explorer, click 'Check for problems', and have SpyBot remove all it finds 'Fix selected problems'

you may have to run spybot more than once to clear everything

Remove everything pre-ticked in Red

Then go to msconfig and untick as many as you can - as instructed in the post above

If you're not sure about any of this or have any more questions - just shout

steam

 

[bilnrobn]

Hi Steam,
I have done all of the above now I think. I deleted Ad-Aware and new.net and then installed and ran Spybot. (The checked items were in black not red???) It found and deleted 60.
I have un-checked from msconfig BigFix, Create CD, LoadPowerProfile, (both of them), Microsoft Office Startup, msnmsgr, QuickTimeTask, Hidserv, Lexstart and Lexmark Print Tray and TKBell Exe. Everything still seems to run okay, at least I haven't found anything so far that doesn't. It still leaves 21 items checked in msconfig, some because they obviously should be and others because I am unsure whether they should be or not.
do you have any further suggestions? (The computer locked up four times today as I was working on this, but hasn't since I finished.)
No I don't have a firewall. I was lead to believe they cause problems by interfering with running programs. If I need one, which (free if possible) one would you recommend?
Also is there any security risk in having all the above detail about my computer configeration displayed for the world to see? Maybe I should delete that part of the thread now?
Thanks again for all your help, it is much appreciated.
Bill

 

[steamwiz]

Hi Bill

spybot - the ticks in the boxes were black - but the writing immediately outside the box was in red with a description after that in black - yes ?
As you look down the list some are red and then they change to green - it's only the pre-ticked red ones we are concerned about.

Run spybot every few days - it's surprising how quick things can get on a computer

msconfig - you can untick these :-

C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE

Yes you definately should have a firewall - information will be going in and out of your computer that you know nothing about - once you have a firewall you can decide what goes out and what comes in.
Ther are many good free firewalls Tiny Personal, and Sygate.- probably the most popular and easiest to use for a beginner is Zonealarm.
see this link :-

http://www.free-firewall.org/

There is no personally identifyable information in your startup - it's totally anonymous so you need not worry about leaving it.

let us know if your problem appears to be cured

steam

 

[Moby]

Just a thought on my troubles when the same thing was happening to me. Have you updated your video drivers recently? They also appear at the windows update sight now aswell. I'm not telling you do it as that was my problem. Updated nvidia drivers, then random lock ups, removed them and went back to the old ones, no problems at all. Just a thought if you've done anything with your drivers recently.
Good luck

 

[bilnrobn]

Thanks steam. One last question. I see the free version of ZoneAlarm doesn't give e-mail attachment protection and is considered pretty useless without it. Does that matter to me as Norton, (and also my ISP), seems very effective in locating nasty attachments? If the free version will do what I need then obviously I would prefer that but if I were to buy Zone Alarm Pro or Plus would there be any conflict with my Norton Antivirus or, come to think of it, PopUp Squasher? (Of course I could uninstal the latter if it became redundant.)
So far what you have suggested and I have done appears to have solved the problem. I can't be sure at this early stage as it was an intermittent problem, but so far so good.
Thanks so much for your help, you have been very patient with me! Thanks also to Maddogmugsy and Moby for their input.

 

[steamwiz]

Hi Bill

I have the Zonealarm free version and norton anti-virus and I have no problems with them working together.

I see no reason for you to buy Zone Alarm Pro or Plus - the free version is all you need - norton will continue to check your e-mails

Glad we were able to help - shout if there's anything else you need to know

steam

 

[bilnrobn]

Thanks Steam. I will download it right away.

 

[steamwiz]

Bill
<marquee>
<img src="http://forums.techguy.org/attachment.php?s=&postid=608976">you're welcome from Steam
</marquee>