XP Critical Updates have left me FROZEN! (HJT log included)

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Neilly

Thread Starter
Joined
May 12, 2004
Messages
45
Here we go again…few days ago I had a prob with some spyware that was successfully sorted by these fine people here…once it was sorted I thought it would be a good idea to download the critical updates from dear ol Microsoft (even though I’ve had probs with this before) Anyway…I downloaded all the important ones and now my comp (Compaq Presario 700 laptop) has an intermittent freezing problem (freezes solid…only way out is to hold the on/off button down for 15sec), sometimes 5min from boot, sometimes 2 or 3 hours. The weird part is that there seems to be no rhyme or reason to when it freezes, (apart from maybe when it goes under load, downloading files, trying to perform restore, virus checks etc which pretty much mean it will freeze). I did manage to do a HouseCall this morning and everything came up clean so I’m fairly sure it is just a prob with the M/S downloads…the prob is how to keep the downloads & stop the system freezing as well (coz I really, really don’t want anymore of that spyware! plus doing a restore to an earlier point is NOT easy as this thing will freeze halfway through). The following is my setup:-

OS Name Microsoft Windows XP Professional
Version 5.1.2600 Build 2600
OS Manufacturer Microsoft Corporation
System Name NEILS2003
System Manufacturer Compaq
System Model Presario 712EA 470031-056
System Type X86-based PC
Processor x86 Family 6 Model 6 Stepping 2 AuthenticAMD ~1195 Mhz
BIOS Version/Date Phoenix 4.06CJ15, 13/12/2001
SMBIOS Version 2.3
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\System32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.0 (xpclient.010817-1148)"
User Name NEILS2003\Administrator
Time Zone Arabian Standard Time
Total Physical Memory 384.00 MB
Available Physical Memory 193.54 MB
Total Virtual Memory 1.23 GB
Available Virtual Memory 956.90 MB
Page File Space 890.63 MB
Page File C:\pagefile.sys

Attached is my HJT log, can someone pls tell me if they can see anything strange with it…from what I can see the only difference between an old log and the new one is the very last entry (017 wasn’t there before). Also a point worth mentioning is that when this thing freezes you don’t get anything at all mentioned in the Event Viewer.

Logfile of HijackThis v1.97.7
Scan saved at 09:29:14, on 16/05/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Iomega\System32\ActivityDisk.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\Norton Internet Security\SymProxySvc.exe
C:\Program Files\Norton Internet Security\NISSERV.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Norton Internet Security\IAMAPP.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINDOWS\System32\S3tray2.exe
C:\Program Files\Nokia\Nokia PC Suite 5\DataLayer.exe
C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Iomega\AutoDisk\AD2KClient.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
C:\Program Files\Norton Internet Security\ATRACK.EXE
C:\WINDOWS\System32\CMMON32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\My Documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.co.uk/
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [iamapp] C:\Program Files\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Nokia\Nokia PC Suite 5\DataLayer.exe
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Iomega Active Disk] C:\Program Files\Iomega\AutoDisk\AD2KClient.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38119.2009953704
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F8EE1125-6B71-49BA-A5E4-869A9825A4D8}: NameServer = 195.229.241.222 213.42.20.20

Thanks for any help/advice you can give

Neilly (y)
 
Joined
May 6, 2004
Messages
23
Can you do a system restore to before you start downloading updates, and then download updates one by one?
 

Neilly

Thread Starter
Joined
May 12, 2004
Messages
45
In hindsight that would have been the way to go...but there was 26 critical ones so I did them in blocks of a couple of hours each, and didn't actully find out I had this freezing prob for a day or so after. By that time I'd renewed my A/V sub's plus a few other things before the big freeze (well lots of little ones really) came along.

Something else has happened (on it's own I swear)...on the original post I mentioned that the last entry (017) on the HJT log was a new one...it's now gone (I did not 'fix' it) and the freezing seems to have slowed down a bit

This is the new log:-

Logfile of HijackThis v1.97.7
Scan saved at 14:50:10, on 16/05/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Iomega\System32\ActivityDisk.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\Norton Internet Security\SymProxySvc.exe
C:\Program Files\Norton Internet Security\NISSERV.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Norton Internet Security\IAMAPP.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINDOWS\System32\S3tray2.exe
C:\Program Files\Nokia\Nokia PC Suite 5\DataLayer.exe
C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Iomega\AutoDisk\AD2KClient.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
C:\Program Files\Norton Internet Security\ATRACK.EXE
C:\Documents and Settings\Administrator\My Documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.co.uk/
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [iamapp] C:\Program Files\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Nokia\Nokia PC Suite 5\DataLayer.exe
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Iomega Active Disk] C:\Program Files\Iomega\AutoDisk\AD2KClient.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38119.2009953704
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Any idea's?...if that previous 017 is the reason for everyones freezing prob's it may help :confused:
 

crjdriver

Moderator
Joined
Jan 2, 2001
Messages
41,357
If there was no problem with lockup / freeze before you updated, boot into safe mode. Now uninstall each update from add / remove programs in control panel. Reboot and see if your freezing problem is gone. If so, install updates one at a time. This way you know which one caused the problem.

Have you checked the event viewer for any problems? This can be helpful in finding the problem. The update may conflict with a driver or tsr. You may be able to update your drivers and cure the problem in this manner.
 

Neilly

Thread Starter
Joined
May 12, 2004
Messages
45
Thanks for the advice...at least that way I don't have to lose the good stuff that went in after. I can see this is going to be a long slow process as I'll have to do them one by one and wait for a few hours between each one (thats how long it can take sometimes between freezes!) to see if this damn thing hangs up.

As for the Event Viewer...that's another strange thing because there is no mention in either Event Viewer or the Error log that anything happened at all?

Once I do find out which update is causing this prob I'll post it here

Thanks

Neilly (y)
 

Neilly

Thread Starter
Joined
May 12, 2004
Messages
45
If anyone is following this thread here’s the latest…have removed 6 of the updates, and so far this thing has behaved itself for the last 5 hours…this included d/l of new A/Virus updates and even allowing me to do full system scan (would have been lucky to just get the window open before let alone do a full scan!), burn CD’s and a few other things that were definite no-no’s a couple of days ago.

Critical Updates still installed (as listed in Add/Remove Programs):-

Media Player Q828026
XP Application Q319580
XP Hotfix KB821557
- “- KB823559
- “- KB824105
- “- KB825110
- “- KB828035
- “- KB828741
- “- KB835732
- “- KB837001
- “- KB840374
XP Hotfix SP 1 – Q311889
- “- -“- Q311967
- “- -“- Q313450
- “- -“- Q314862
- “- -“- Q315000
- “- -“- Q315403
- “- -“- Q318138
- “- -“- Q323172
- “- -“- Q324380
- “- -“- Q326830
- “- -“- Q328940
- “- -“- Q329048
- “- -“- Q329390
- “- -“- Q329441
- “- -“- Q329170
- “- -“- Q810577
- “- -“- Q815021
- “- -“- Q817606
XP Hotfix SP 2 – Q329115

Suckers removed (in order of removal):-

Q811493
Q309521
Q324096
Q819696
KB824141
KB832182

Not saying this is going to fix everyone’s “Hang-ups” …but at least I can use this comp now without wanting to hurl it through the window every few minutes!

All the best

Neilly
 

crjdriver

Moderator
Joined
Jan 2, 2001
Messages
41,357
Glad you were able to get it working. While updates are tested, it is impossible to test with every conceivable configuration of mb, memory, video, sound, etc. On rare occasions you will find one that just will not work.
While it is good to do the updates, the best defense against a virus is a hardware firewall and a good AV program.
 

Neilly

Thread Starter
Joined
May 12, 2004
Messages
45
Just to let you know this "thing" has been running all day and hasn't frozen once...consider it sorted! :D

Thanks for all your help...much appreciated ;)

All the best

Neilly
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top