Random Freezing XP - Spybot 1.6?

Status
Not open for further replies.

deeps1987

Posts: 109   +0
I have 3 computers, (2 desktop, 1 laptop)
I decided to re-format them and install the OS fresh, I do this every 5-6 months for the past 10 years.

This is the routine i follow,
Format with the XP CD
Install from the xp CD
Make a image with Acronis True Image
Install drivers (Motherboard, Graphics card, Printer etc.. in that order)
Make a image
Register windows and install essential software (AVG 8, Spybot 1.6, Office)
Make another image

its always worked for years, but this time on all 3 computers, while browsing the Internet, they freeze, and my gaming PC, with a O/C quad core should not do that, not with 2 Internet explorer browsers open.

What could be causing this? Iv done a spyware and anti-virus check, nothing, defragged the hard disks, out of ideas now. I suspect it could be Spybot 1.6 or a certain setting in Spybot? before 1.6 i never had a problem.

When it freezes, i can still move the mouse, but the Start menu and taskbar don't work, and Ctrl + Alt+ Del doesn't do anything, so i cant get task manager, even when i did get task manager, it didn't help, even when i ended Explorer.exe.

Thanks for any help
 
Too bad you have been automatically reinstalling. You didn't learn how to troubleshoot- threw out the bath water instead!

Since you suspect Spybot S&D, do a System Restore on at least one of the systems, to date before you installed Spybot S&D. Make sure TeaTimer isn't on Startup. Also check Add/Remove and if Spybot still shows, uninstall. Reboot and check system status and let us know.

And since you have a dual boot or there are two OS involved, can you pin the problem down to either OS? We'll go from there.
 
I haven't been re-formatting it just because of the crash, i do it often to clean out the system. Iv un-installed Spybot from my main PC and will let you know if it freezes again.
I don't have dual boot, on the 2 desktops i have Windows XP Professional and on the laptop i have Windows XP home.

If it turns out it isn't Spybot, what else could it be? the things i installed on all my computers which isn't hardware related is

Microsoft Office 2003
WinRar
Adobe Acorbat Reader 8, Adobe Flash (with google toolbar)
AVG 8 Professional
Windows Live Messenger
Spybot 1.6
Internet Explorer 7
Windows Media Player 11

anything look suspect?

Also i download and installed all windows updates
 
My thought is that reformatting/reinstalling on a regular basis to clean out a system is unnecessary. This should only be done when and if there is no other solution to a serious problem. It would also indicate that you have no regular maintenance in place for the system, because if you did, you wouldn't being reformatting/reinstalling every 6 months.

The maintenance is to include disc cleanup, error check, uninstall any programs or apps that are not being used, checking the startup menu so that only antivirus, firewall, touchpad for laptop and network process if on network start at boot. This also includes running regular scans with the security programs, updating each right before the scan. If this maintenance was done regularly, you would not have to "clean out" your system so drastically every few months.

We will deal with any remaining situation "after" the System Restore and/or the uninstallation of Spybot S&D. I see no problem with the list you give, assuming they were all downloaded from legitimate sites and didn't come bundled with 'extras'.
 
What have you got against re-formatting? It might not be the quickest solution, but i find it works best and i prefer it to uninstalling programs, as that still leaves rogue file in the Windows directory. It cleans out any virus or spyware which failed to be picked up.

I do maintenance work on all 3 computers every week, including uninstalling unnecessary programs, defragmenting the hard-disks, running spyware and anti-virus checks, checking start up directories etc. I also stop certain drivers from running at start-up, such as sound driver applications, graphics card drivers (CCC) as they arnt needed.

I don't 'need' to reformat the PC's, i just choose too, to keep maximum performance.

So far the PC hasn't frozen after uninstalling Spybot 1.6.
Has anyone else witnessed this before?

If it turns out it was Spybot 1.6, which alternative spyware program would you recommend which also has the capacity to control Internet Explorer settings as well as start up applications?
 
It could be you got a bad download or there was a problem with the installation. Suggest you set a System Restore point, call it 'before Spybot'- or whatever) then download and SAVE Spybot S&D from here:
http://www.safer-networking.org/en/home/index.html

Run the set-up from the desktop. I see some who run a download from a site and have problem so I always encourage saving to hard drive first.
 
My PC just froze again, so it cant be Spybot, as it wasnt even installed. Now i dont know what it could be. How would i find out?
 
Check the Event Viewer for Error that corresponds to time of freeze:

Control Panel> Administrative Tools> Event Viewer> click on System to open log> right click on the Error> Properties> click on the Copy icon top right below the down arrow and Paste here (Ctrl V)

Do the same with the App log.

Ignore Warnings and Information Events. If you have recurring Errors with the same ID#, the same Source and the same description, I only need one copy. We are particularly looking for Error at time of freeze.
 
Error Messages

here are a few of the errors i recived on my gaming pc. This all happened around 11:48 PM

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4614
Date: 22/08/2008
Time: 23:48:35
User: N/A
Computer: GAMINGPC
Description:
The COM+ Event System detected an inconsistency in its internal state. The assertion "GetLastError() == 122L" failed at line 162 of d:\comxp_sp2\com\com1x\src\events\shared\sectools.cpp. Please contact Microsoft Product Support Services to report this error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 22/08/2008
Time: 23:48:31
User: GAMINGPC\Sembhi
Computer: GAMINGPC
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Microsoft Fax
Event Category: Initialization/Termination
Event ID: 32068
Date: 22/08/2008
Time: 23:48:26
User: N/A
Computer: GAMINGPC
Description:
The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Microsoft Fax
Event Category: Initialization/Termination
Event ID: 32026
Date: 22/08/2008
Time: 23:48:26
User: N/A
Computer: GAMINGPC
Description:
Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1015
Date: 22/08/2008
Time: 23:48:25
User: N/A
Computer: GAMINGPC
Description:
TraceLevel parameter not located in registry; Default trace level used is 32.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1003
Date: 22/08/2008
Time: 23:48:25
User: N/A
Computer: GAMINGPC
Description:
TraceFileName parameter not located in registry; Default trace file used is .

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1003
Date: 22/08/2008
Time: 23:48:11
User: N/A
Computer: GAMINGPC
Description:
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 001E8C3A7108. The following error occurred:
The semaphore timeout period has expired. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 79 00 00 00 y...
 
Just When You Get Comfortable With the Old Programs.....

My PC just froze again, so it cant be Spybot, as it wasnt even installed. Now i dont know what it could be. How would i find out?

This is just a wild guess, but I would suspect AVG-8 before I would suspect Spybot. Its' (Spybot) newest incarnation is kind of annoying, but it doesn't seem to cause trouble. The annoyance I mention is from the "Teatimer"s" constant announcements of what it's scanning.
Avg 8 has been garnering some complaints, although I don't know if they directly relate to the problem you're incurring. You might want to uninstall (or not install) some of the latest M$ security updates, and see if that helps.
 
I told you to ignore Warnings, so I'm not going through them. If the situation in a Warning doesn't resolve, it will be followed by an Error.

Error, Category: 50, Source: EventSystem. Event ID: 4, Description: The COM+ Event System detected an inconsistency in its internal state. The assertion "GetLastError() == 122L" failed at line 162 of d:\comxp_sp2\com\com1x\src\events\shared\sectools.cpp.614,
Event catagory 50 deals with hardware issues
Remove the nVidia drivers via the Control Panel...Add/Remove Programs applet.
Install the latest WHQL certified drivers from here: http://www.nvidia.com/object/winxp_2k_93.71.html
http://www.nvidia.com/object/winxp_2k_93.71.html
You may also troubleshoot this error here: http://support.microsoft.com/kb/909444

The two Warnings related to the Fax are saying that you try to fax but have no Fax Capability.
 
Usually at night i leave my pc running playing music (cant sleep without music). Anyways the past week since i reformatted my pc, it usually froze my pc my morning, but last night it didnt, and also my pc hasnt frozen at all today :S

just to be on the safe side i un-installed AVG 8 as well.

I didnt try to fax, i dont even know how to :S
and i dont have anything Nvidia on my PC

got a new error

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 23/08/2008
Time: 00:49:54
User: N/A
Computer: GAMINGPC
Description:
Hanging application iexplore.exe, version 7.0.6000.16705, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 37 re.exe 7
0020: 2e 30 2e 36 30 30 30 2e .0.6000.
0028: 31 36 37 30 35 20 69 6e 16705 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000
 
Since we ignore Warnings, we'll ignore that something in your system is looking for Fax.

Please tell me you put another antivirus program on in place of AVG!

NVidia would be your graphics card:
Control Panel> Display> Settings> Advanced Ge-Force tab.

Unfortunately, Event 1002 just the indicated program stopped responding. A matching event with Event ID 1001 might also appear in the Event log. This matching event displays information about the specific error that occurred.

What is the source of the music you play all night with the computer connected to the internet?
 
i have ATI graphics cards, nothing in my cmputer is Nvidia, not even my motherboard.

I currently have no anti-virus, as im trying to get to the problem of the crashes, after i do, ill re-format my pc again and wont install the culpit program.

Music is played from my hard drive.
 
just to be on the safe side i un-installed AVG 8 as well.

Since you're currently running with no AV installed, (not a good idea) might I suggest the Avast or Avira free programs. The new AVG 8 has a fairly heavy footprint and either of these would require less CPU to operate.

How's our video driver?
 
Unless you are set to 'work offline; if you're on broadband, you are connected to the internet the entire night. Doing so without antivirus protection is not in your best interest.

You gave Event from the logs. I read the events. But you are basically telling us that the events aren't accurate because you don't have or use those processes/programs/apps or other that are shown in the event logs.

See if this addresses the Event 4614:
You may experience various problems after you install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC:
http://support.microsoft.com/kb/909444

Sometime a cause is not clear cut and we have to start somewhere. When you say the problem happens on three different computers and they show 2 different operating systems, it is not easy to pin down one cause for all.
 
I installed Spybot and AVG again, and for the second night in a row, my PC hasnt frozen :S I havent changed or done anything, even the other 2 computers seem to work fine.
Can any of this be explained, why did it happen and suddenly fix it self?
How can i prevent it next time?
 
I cannot tell you why when I cannot find a reason. At the same time, I cannot tell you how to prevent something if I don't know what caused it.

I could suggest that the continued reformatting/reinstalling gives more chance for missing files that are needed- but I won't because it would just antagonize you.
 
I installed AVG 8 and now my PC is freezing again, so i un-installed it again to see if it really was AVG.
Everytime iv seen the PC freeze, Windows Live Messenger was trying to sign on, maybe it has something to do with my Internet connection or Windows Live Messenger?

The thing is iv always had the same installation files on my hard drive for Windows Live Messenger, AVG 8 and Spybot, which iv always used, so how could they be causing errors now? Possibly certain updates?

Event Type: Error
Event Source: BROWSER
Event Category: None
Event ID: 8007
Date: 24/08/2008
Time: 21:30:27
User: N/A
Computer: GAMINGPC
Description:
The browser was unable to update the service status bits. The data is the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: bb 06 00 00 »...

Event Type: Error
Event Source: Windows Live Messenger
Event Category: None
Event ID: 1000
Date: 24/08/2008
Time: 22:59:23
User: N/A
Computer: GAMINGPC
Description:
The description for Event ID ( 1000 ) in Source ( Windows Live Messenger ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: msnmsgr.exe, 8.1.178.0, 45b12d6a, ntdll.dll, 5.1.2600.2180, 411096b4, 0, 00018fea.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 6d 00 73 00 6e 00 .m.s.n.
0030: 6d 00 73 00 67 00 72 00 m.s.g.r.
0038: 2e 00 65 00 78 00 65 00 ..e.x.e.
0040: 20 00 38 00 2e 00 31 00 .8...1.
0048: 2e 00 31 00 37 00 38 00 ..1.7.8.
0050: 2e 00 30 00 20 00 34 00 ..0. .4.
0058: 35 00 62 00 31 00 32 00 5.b.1.2.
0060: 64 00 36 00 61 00 20 00 d.6.a. .
0068: 69 00 6e 00 20 00 6e 00 i.n. .n.
0070: 74 00 64 00 6c 00 6c 00 t.d.l.l.
0078: 2e 00 64 00 6c 00 6c 00 ..d.l.l.
0080: 20 00 35 00 2e 00 31 00 .5...1.
0088: 2e 00 32 00 36 00 30 00 ..2.6.0.
0090: 30 00 2e 00 32 00 31 00 0...2.1.
0098: 38 00 30 00 20 00 34 00 8.0. .4.
00a0: 31 00 31 00 30 00 39 00 1.1.0.9.
00a8: 36 00 62 00 34 00 20 00 6.b.4. .
00b0: 66 00 44 00 65 00 62 00 f.D.e.b.
00b8: 75 00 67 00 20 00 30 00 u.g. .0.
00c0: 20 00 61 00 74 00 20 00 .a.t. .
00c8: 6f 00 66 00 66 00 73 00 o.f.f.s.
00d0: 65 00 74 00 20 00 30 00 e.t. .0.
00d8: 30 00 30 00 31 00 38 00 0.0.1.8.
00e0: 66 00 65 00 61 00 0d 00 f.e.a...
00e8: 0a 00 ..

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 24/08/2008
Time: 22:58:48
User: N/A
Computer: GAMINGPC
Description:
Hanging application iexplore.exe, version 7.0.6000.16705, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 37 re.exe 7
0020: 2e 30 2e 36 30 30 30 2e .0.6000.
0028: 31 36 37 30 35 20 69 6e 16705 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000
 
There is no indication that AVG itself is causing the problem:

Event Type: Error, Source: BROWSER, Event ID: 8007, Description:The browser was unable to update the service status bits. The data is the error
Date: 24/08/2008, Time: 21:30:27

The Browser service maintains a list of computers on the network and supplies this list to computers designated as browsers. The Browser service follows a certain election procedure that ensures that the "important" computers (i.e domain controllers or servers vs. workstations) are always elected first as browsers for the network where they reside.

This service should be stopped if you do not want the computer to ever attempt to be a browser for its network segment:
Control Panel> Administrative Tools> Services> right click on Computer Browser> Properties> change Startup to Manual.

Then find the Server Service> right click> Properties> change Startup to Manual.
Next find Workstation> right click> Properties> change Startup to Automatic.

When settings are completed, reboot the computer. The necessary Services will start on boot, others will start if needed. This is the conservative setting. Browser and Server "may" be able to be Disabled, but do not do at this time.
Event Type: Error, Source: Application Hang, Event ID: 1002, Description:Hanging application iexplore.exe, version 7.0.6000.16705, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Date: 24/08/2008, Time: 22:58:48
Again, this event does not provide enough information by itself, but combined with the Messenger event, yes, it would appear that the MSN Messenger is causing IE to hang. Why? I don't know. You might try disabling the Messenger to see if that stops the freezes. If it does, I suggest an uninstall, then reinstall if you use it.
Event Type: Error, Source: Windows Live Messenger, Event ID: 1000, Description: The description for Event ID ( 1000 ) in Source ( Windows Live Messenger ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: msnmsgr.exe, 8.1.178.0, 45b12d6a, ntdll.dll, 5.1.2600.2180, 411096b4, 0, 00018fea.
Date: 24/08/2008, Time: 22:59:23
msnmsgr.exe is the main executable for MSN Messenger
 
Status
Not open for further replies.
Back