Computer keeps Freezing whenever I launch a big program...

Forums: Computers
Email this Topic • Print this Page

Computer keeps Freezing whenever I launch a big program...

Okay, I've been dealing with this for a while. Please help.

I followed Timber's "Virus steps" and can't complete them because computer freezes shortly after stinger begins scanning.

It also freezes when attempting to open a PDF, run Spybot, run virus check or open a large 3 dimensional view in an architectural program (smaller ones work fine).

I tried restore and that did nothing.

I was able to defrag drives D, F and G but not C... which is very strange because I use XP on D (C and D are partitions on the same Drive). The information on drive C is as dated as the operating system that resides there. I could live without it if I have to. The drive was in another computer and I added it to this one as a second so I wouldn't lose the info. After messing up the registry on this computers drive, I loaded XP onto the D partition so I can now pull files from D (main), F (older) or C (oldest). (You may recall me asking about jumper settings). All seemed to work fine for a few months and now this.

I was able to download a pretty large update for McAfee Personal Firewall Plus but computer froze when it tried to install it.

McAfee VirusScan has received and installed all of it's updates to the best of my knowledge.

I also noticed when it froze while defragging D: (only once), it was moving a file called BATMETER.DLL if that means anything?

Is this enough information for anyone to have a clue how to advise me?

Thank you in advance, anyone.

Logfile of HijackThis v1.98.0
Scan saved at 9:36:41 AM, on 7/1/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
D:\PROGRA~1\mcafee.com\agent\mcagent.exe
D:\PROGRA~1\DIRECWAY\bin\dpcproxy.exe
d:\progra~1\mcafee.com\vso\mcvsescn.exe
D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
D:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Messenger\msmsgs.exe
D:\WINDOWS\System32\ctfmon.exe
d:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
D:\Program Files\DIRECWAY\BIN\dpcstart.exe
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFAGENT.EXE
D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFSERVICE.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\BRMFRSMG.EXE
d:\progra~1\mcafee.com\vso\mcvsftsn.exe
d:\PROGRA~1\mcafee.com\vso\mcshield.exe
D:\PROGRA~1\DIRECWAY\bin\dpcnav.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Documents and Settings\BILL WARD\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.refdesk.com/
F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - d:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [VSOCheckTask] "d:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "d:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] d:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] D:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Dpcstart.lnk = D:\Program Files\DIRECWAY\BIN\dpcstart.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {405BBF5B-2FD8-4614-AC51-D8566F635B94} (SafeWallet Class) - http://idsm.citadelprocessing.com/SafeCommon/downloads/WalletCab.CAB
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,83/mcinsctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/22a318a28e00b36c9520/netzip/RdxIE601.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F84453D9-703F-4FFA-847E-B799D9A8F7C6}: Domain = direcway.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{F84453D9-703F-4FFA-847E-B799D9A8F7C6}: NameServer = 198.77.116.8,66.82.4.8

Topic Stats
Top Replies
Link to this Topic

Type: Discussion • Score: 1 • Views: 3,961 • Replies: 43

No top replies

I have now managed to update my firewall, at least.

0 Replies

I asked you to post a log because of the mention of stinger not working (I thought it might be something targeting it) but I can't see anything obvious.

Hmmm. I'm almost out of ideas.

1) In task manager what is eating up resources? Sort the processes by both cpu and memory to see if there is a specific hog (system idle is normal for cpu, but if there's anything else hogging let us know).

2) Have you rebooted? Dumb question but hey, I've seen stuff like this.

3) Have you tried system restore?

0 Replies

Thanks for looking.

Restarting and System Restore don't help. I don't know how to look at what is eating system resources.

Since it is the C: drive that I can't defrag, would it help/hurt to delete the contents of it?

0 Replies

Quote:

I don't know how to look at what is eating system resources.

Press Ctrl+Alt+Del at the same time. Then click Processes and look at each application and its CPU consomation

0 Replies

Thanks Cyanure

I used a Period instead of a comma in the "k" number for quicker typing.

All this stuff is going on when I only had Microsoft Word and the Windows Task Manager running. Shocked

Does that mean anything?

MSWorks.exe 2.860
WINWORD.EXE 16.012
Iexplore.exe 19.892
Dllhost.exe 5.596
Svchost.exe 3.076
Taskmgr.exe 4.096
MpfService.exe 2.592
Msdtc.exe 2.400
Mdm.exe 2.740
Mcvsrte.exe 5.456
Explorer.exe 16.128
MpfAgent.exe 3.584
Dpcproxy.exe 2.520
Spoolsv.exe 3.112
Mcvsftsn.exe 3.472
Dpcstart.exe 2.012
Svchost.exe 2.508
Svchost.exe 1.840
Svchost.exe 13.912
Ctfmon.exe 1.412
Svchost.exe 3.280
Msmsgs.exe 3.212
Lsass.exe 4.776
Services.exe 3.452
Winlogon.exe .580
Csrss.exe 2.796
Realsched.exe .180
Jusched.exe 1.088
MpfTray.exe 9.216
McShield.exe 6.788
McVSEscn.exe 3.144
Mcagent.exe 2.864
Mcvsshld.exe 3.968
Dpcnav.exe 8.196
SMSS.EXE .352
BrmfRsmg.exe 1.336
System .124
System Idle Process .20

0 Replies

I am worried about the DLLHOST.exe file.
I think it's the Welchia worm.

Go to C:\Windows\System32\Wins and see if a DLLHOST.exe file is found there.

Anyway download Welchia removal tool from here and scan your computer:
http://www.sarc.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

0 Replies

After thought and since you have a firewall, the DLLHOST.exe file is a SYSTEM file and nothing to worry about.
But what you paste here is the Memory Usage. You need to paste the numbers found under CPU title.

0 Replies

It's very likely not Welchia, Cyanure.

By the way, Bill, a full list of running processes isn't really needed since it was already included in your HJT log (and it must be a bitch to type!) What the guys here are interested in are really only the few processes that're taking up the MOST resources (both memory which you listed & cpu which you didn't) WHILE the computer is freezing up. Exactly how much cpu & ram they're taking up isn't that critical either (rough estimates are fine).

There are unfortunately a number of things that might cause the symptoms you describe, and sometimes in the end the quickest fix (if you can easily make backups of your programs & data) is to just format the computer & clean install Windows, as long as it's not a hardware-related problem.

However, a list of maybe the top 5 cpu hogs & top 5 memory hogs while the computer is freezing might be helpful for diagnostics.

0 Replies

Thinking about it some more, here are the most obvious things you should check...

Your computer may be overheating (this is a very likely possibility since it seems that only cpu intensive applications are making the computer freeze). Maybe the fan in your 'puter's power supply is broken, dusty or just too weak. Your cpu should also have a fan, & it may be broken. Then again, the fans may be just fine but the vents at the back of the PC might be blocked up.

It could also be IRQ conflicts you're seeing. Two devices may be trying to access the same IRQ, which would cause lock-ups like you're seeing. You can use the Device Manager (click Start->Run->type: devmgmt.msc) to determine if you're having an IRQ conflict.

Also, your temporary file folders could be too full. Clean out everything in the Windows\Temp and Temporary Internet Files folders, then empty the Recycle Bin and (try to) defragment your hard drive again. Also check that the partition where your OS is installed (you've said this is D: in your case) has at least 10 percent of its space free at all times for Windows to create a proper swap file. And uninstall any programs you're not using.

That should be a good starting list. Smile

If you need additional help with any of those steps let us know.

0 Replies

Monger wrote:

both memory which you listed & cpu which you didn't

And CPU is probably the problem.

0 Replies

Quote:

Monger wrote:
both memory which you listed & cpu which you didn't

And CPU is probably the problem.

Yes, but I suspect that the CPU is the problem because of overheating rather than some program hogging it, but post the top CPU-using programs during lockup anyway so we can check that much out at least..

0 Replies

Okay, everything uses almost no CPU ACCEPT:
McShield.exe SYSTEM varied wildly prior to lockup, frequently jumping into the 70's, 80's and 90's. Is that my problem?

1. Locked up while scanning for Welchia.
2. Unlikely to be overheating as my case has lots of different fans. However, I just popped the cover and it will run try again with a 12 inch fan blowing directly on the guts after I post this.
3. Tons of free space on every drive.
4. Temp files are empty, cookies and recycle bin empty.
5. No IRQ conflict

0 Replies

Machine just finished checking C:/ for Welchia... Yeah baby! It would appear you geniuses have done it again. Back was very dusty and 1 of 2 case fans was out... (Amazing that you knew that) I'm going to defrag, virus update, Spybot and Adaware scan with the cover open and the 12 inch fan blowing on the guts. Meanwhile, I'll be pulling some extra fans out of some old cases I have. Turns out the back of this machine gets missed when I dust the rest of it (I mean used to Embarrassed

). Will let you know if I have any more trouble. Scan has completed D drive now with no problems so I think you've solved it. You guys rock. Thank you so much!

btw McShield is still jumping wildly... is that normal?

0 Replies

McShield.exe is related to McAfee VirusScan. It scans your files in the background when you try to access them.
I don't know but try to disable or uninstall McAfee and then try to open a big file and see if your computer freezes.
I think that McAfee is causing this problem.

0 Replies

You may be right, cause the damn thing froze again. Heat may be a contributer, but that's not all of it. Will disable McAfee and try to defrag. Thanks.

0 Replies

With McAfee disabled, defragged all 4 drives and performed stinger scan with no problem. Again, I think we have the culprit. Going to do the Spybot and Adaware, while this is working, and then uninstall McAfee completely and re-download it from their site. My subscription's up to date so it should be free... actually, it looks more like they owe me some dough for my time. And again, I sure do appreciate you guys taking your time to help me.

0 Replies

hmm....
Aol techie here . I want to interject one point.
after you download a virus scan of any kind, make sure before you turn on the computer again that you reset your security feature to the highest setting, restart , set them BACK to where you had them and restart once more.
yeah.. i know.. it sounds like a bunch of crap.. hehe..
but it works. > i am going to be hung for this <
Aol program , like many others WETHER you use it or NOT have attachments and cookies hidden in your security settings. This was one of the first tactics we were taught at aol. erasing cookies, temp files etc doesnt always do ****. Alot of anti virus programs do the same thing claiming they are 'covering all bases' when actually all they are doing is depositing thier 'pod babies' to one day take over the world. hehehe.. Really.. i dont know why they do, but I am willing to bet that since it isnt a virus and that fixing your fan hasnt done everything, what ever it is that is tripping your computer up has hidden itself there.
I dunno.. just a suggestion.. give it a shot. It wont hurt anyting that is for sure. :-)

0 Replies

Nope, still haven't found the damn thing. Froze up during Spybot upon finding scumware called:
eAcceleration on my:
D:\ Downloaded Program Files Setup.Inf

For clarification, I've replaced fan and it was gummed up bad. I still have the cover open with a 12 inch fan blowing direct so I don't think cooling could be an issue right now at least.

Stinger found nothing wrong.

Any ideas?

0 Replies

shewolfnm wrote:

hmm....
Aol techie here . I want to interject one point.
after you download a virus scan of any kind, make sure before you turn on the computer again that you reset your security feature to the highest setting, restart , set them BACK to where you had them and restart once more.
yeah.. i know.. it sounds like a bunch of crap.. hehe..
but it works. > i am going to be hung for this <
Aol program , like many others WETHER you use it or NOT have attachments and cookies hidden in your security settings. This was one of the first tactics we were taught at aol. erasing cookies, temp files etc doesnt always do ****. Alot of anti virus programs do the same thing claiming they are 'covering all bases' when actually all they are doing is depositing thier 'pod babies' to one day take over the world. hehehe.. Really.. i dont know why they do, but I am willing to bet that since it isnt a virus and that fixing your fan hasnt done everything, what ever it is that is tripping your computer up has hidden itself there.
I dunno.. just a suggestion.. give it a shot. It wont hurt anyting that is for sure. :-)

Actually unmitigated bull does hurt. What on earth are you talking about?

0 Replies

Computer keeps Freezing whenever I launch a big program...

Related Topics

Quick Links

My Account

able2know