MyTechSupport.ca :: Your Computer Technical Resource Headquarters! MyTechSupport.ca :: Your Computer Technical Resource Headquarters!
HOME FORUMS RESOURCES & TOOLS ARTICLES ONLINE STORE ABOUT US
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: Random Freezing, please help
November 20, 2019, 03:42:21 AM
 

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
November 20, 2019, 03:42:21 AM

Login with username, password and session length
 Featured Sites:
News
New  Looking for cheap hardware and/or software?
Visit our new Online Store where you will be able to purchase from a reputable vendor by country.
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: Random Freezing, please help  (Read 2845 times)
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« on: December 10, 2004, 08:17:00 PM »

---I've run the most up-to-date Ad-Aware and it shows 25 Running Process, 1021 Process Modules - 0 objects of any kind.

---I've run the most up-to-date AVG 7.0 and it shows 0 viruses or any infected files.

---I have the most up-to-date SpywareBlaster installed and I have full protection against everything checked off...

---I have the most up-to-date Hijackthis, when scnaning I don't see anything that seems too foreign...

My computer is a 1.2 gHZ AMD Athlon Processor
262 MB RAM
Running Windows 2000 Professional

I just reformatted about a month ago, and became a first time downloader/user of software such as Firefox, Thunderbird, and Foobar2000.  

However, my computer will still randomly freeze up.. It was freezing up about 40% through the AVG full system scan yesterday.  I found 2 Trojan horses in Safe mode and deleted them, and then it ran smoothly.     However my computer continued to freeze, I ran all of the above-mentioned programs and they do not seem to find anything, so I removed Foobar2000 and am using WinAmp instead.  

Last night after doing these changes I was running Internet Explorer to see if it would randomly freeze, and it did not.  So I then used Firefox for a few hours and it was freeze-free then too.  

Today, on the other hand, it froze while surfing a page after about 5 minutes with Firefox (which is all up-to-date too).  I recently unplugged an obsolete hard drive and uninstalled it from the BIOS as well.  My CD-Roms are both detected in their normal spots, as is my primary hard drive.. I could check the BIOS for their exact IDE locations if necessary, here is my Hijackthis scan:

Logfile of HijackThis v1.98.2
Scan saved at 3:15:11 PM, on 12/10/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\runservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\atiptaxx.exe
C:\WINNT\system32\desk95.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\baker\Desktop\HijackThis\HijackThis.exe
C:\WINNT\system32\mmc.exe

O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] desk95.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\LaunchPd.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe


Any ideas?



« Last Edit: December 11, 2004, 12:10:57 AM by jvic » Logged

 
Geekgirl
Global Moderator
Hero Member
*****

Karma: +25/-1
Offline Offline

Gender: Female
Posts: 3175



Bookmark and Share

View Profile
« Reply #1 on: December 10, 2004, 08:49:40 PM »

runservice.exe is related to spyware
Download / Install / Update / and Run:

SpyBot  
Make sure you check for updates before running.

Also try this free online scanner using Housecall
 
Then post a complete fresh logfile
 (Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders. A good place to make a folder would be in My Documents,as this is where it will save the backup files needed if there's a problem.)
« Last Edit: December 10, 2004, 09:49:26 PM by Geekgirl » Logged




Girlz Rule ...Boyz Drool
____________________________
ALWAYS BACKUP YOUR REGISTRY BEFORE EDITING
jvic
Visiting Administrator
Hero Member
*****

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 1238


Bookmark and Share

View Profile
« Reply #2 on: December 11, 2004, 12:10:06 AM »

moved to security and viruses
Logged

John Vickers
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« Reply #3 on: December 11, 2004, 12:34:49 AM »

Thanks!


Here's what SpyBot found:

--- Report generated: 2004-12-10 15:51 ---

DSO Exploit: Data source object exploit (Registry change, fixed)
  HKEY_USERS\S-1-5-21-1060284298-920026266-854245398-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

Alexa Related:  Link (Replace file, fixed)
  C:\WINNT\Web\RELATED.HTM



Here is the new HijackThis log:

Logfile of HijackThis v1.98.2
Scan saved at 7:32:06 PM, on 12/10/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\runservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\atiptaxx.exe
C:\WINNT\system32\desk95.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Grisoft\AVG7\avgwa.dat
C:\Program Files\SpywareBlaster\spywareblaster.exe
C:\Documents and Settings\baker\Desktop\HijackThis\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] desk95.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\LaunchPd.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe


Being at the top, the "runservice.exe" shows up only on the log file, not where I can check it off and click fix... should I manually delete this file?


Logged

 
Cactus
Security & Virus Specialist
Global Moderator
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 4327


Bookmark and Share

View Profile
« Reply #4 on: December 11, 2004, 02:21:12 AM »

Your logfile looks good alex732.. Grin

Have SpyBot fix whatever it finds...fix ALL that is RED

Was that the WHOLE logfile?

Cactus
Logged

**PLEASE**.....do not post your hijack log in someone else's thread. Start a separate thread HERE! Thank you.

cactus@mytechsupport.ca

My System Specs

Avg Antivirus::Ad-Aware::Spybot::Windows Update::Recuva
Malwarebytes::SUPERAntiSpywareFREE
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« Reply #5 on: December 11, 2004, 02:36:41 AM »

Yes, I have relatively few things installed Smiley

So far is has not frozen since I ran SpyBot.  I also just Defragged, but I don't know if that would help with anything.

Thanks for all the help!  I will post back if my problem persists, but so far it has been running smoothly!

Thanks again, you're all the best.  

I guess I'll just leave the runservice.exe..
Logged

 
Cactus
Security & Virus Specialist
Global Moderator
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 4327


Bookmark and Share

View Profile
« Reply #6 on: December 11, 2004, 02:45:33 AM »

Yes just leave it there... Grin

runservice.exe

eLicense, licensing system incorporated with some software and games.
Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program.

You'll need that file... Wink

Besides that everything looks good...Grin

Cactus
Logged

**PLEASE**.....do not post your hijack log in someone else's thread. Start a separate thread HERE! Thank you.

cactus@mytechsupport.ca

My System Specs

Avg Antivirus::Ad-Aware::Spybot::Windows Update::Recuva
Malwarebytes::SUPERAntiSpywareFREE
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« Reply #7 on: December 15, 2004, 01:04:36 AM »

Once again my computer is experiencing lots of random freezing.

I found nothing with 2 different virus scanners, and spybot.

I even updated all of my drivers completely, and tried to do the Windows Emergency Repair..  same thing.

Here's my HijackThis log:

Logfile of HijackThis v1.98.2
Scan saved at 8:02:08 PM, on 12/14/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\runservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINNT\System32\desk95.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINNT\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\baker\Desktop\HijackThis\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] desk95.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\LaunchPd.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
Logged

 
Cactus
Security & Virus Specialist
Global Moderator
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 4327


Bookmark and Share

View Profile
« Reply #8 on: December 15, 2004, 02:17:37 AM »

There's nothing in your Logfile alex732..Smiley

Your Logfile is clean... Grin

Do a Defrag and also go into ADD/REMOVE PROGRAMS and make sure anything you've removed...is gone!!
If not ,let us know.
There's nothing I can see that would coz your PC to freeze up.

Cactus
Logged

**PLEASE**.....do not post your hijack log in someone else's thread. Start a separate thread HERE! Thank you.

cactus@mytechsupport.ca

My System Specs

Avg Antivirus::Ad-Aware::Spybot::Windows Update::Recuva
Malwarebytes::SUPERAntiSpywareFREE
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« Reply #9 on: December 17, 2004, 05:14:35 AM »

I just ran SpyBot Search and Destroy and it found:

--- Search result list ---
Alexa Related:  Link (Replace file, fixed)
  C:\WINNT\Web\RELATED.HTM

--------------------------
What is this "Alexa related" thing and could this have been affecting my computer?  I found this same exact thing once before(see previous posts)... how could it have returned?
--------------------------

I defragged 2 days ago, and there's nothing in my add/remove program list that I didn't put there myself..

It's weird, if I am not running my computer, it will be absolutely fine for like a day, and then it will randomly freeze... and then every time I try to do something after that it will just freeze more and more frequently..  I don't know what this means, some people have told me that it might be a hardware problem?

There really is nothing different about my computer's hardware then 2 months ago when it was working perfectly before I formatted.

There's one other thing...

When I go to Control Panel -> Administrative Tools -> Component Services, and go to Event Viewer (Local) - Application...

I see dozens of Errors with red X's...  13 of them may occur within the span of 5 seconds ...some of them occuring on the same time.

Almost all of them have the following information:

Source:  WinMgmt
Category: None
Event: 41  (a couple of them are 37)
User: N/A

What are these Errors from.. and if there is a more detailed log of these Errors I could supply for you, I would gladly do so if you wish it...

Thanks,

Alex



Logged

 
Cactus
Security & Virus Specialist
Global Moderator
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 4327


Bookmark and Share

View Profile
« Reply #10 on: December 17, 2004, 06:55:16 AM »

Have Spybot and Ad-Aware clean everything they find... Wink

Goto ADD/REMOVE PROGRAMS and remove Alexa

Ad-Aware and Spybot should pick that up...have them fix it.

Cactus Grin
« Last Edit: December 17, 2004, 06:58:20 AM by Cactus » Logged

**PLEASE**.....do not post your hijack log in someone else's thread. Start a separate thread HERE! Thank you.

cactus@mytechsupport.ca

My System Specs

Avg Antivirus::Ad-Aware::Spybot::Windows Update::Recuva
Malwarebytes::SUPERAntiSpywareFREE
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« Reply #11 on: December 17, 2004, 08:02:14 AM »

Spybot removed it.. I'm freezeless so far!

These Errors in the Component Services that I mentioned above are worrying me though...
-------------
Here is what some of their descriptions look like:
(This is in the Event Viewer(Local)/System)
-------------
The Point to Point Protocol module C:\WINNT\System32\rastls.dll returned an error while initializing. The network request is not supported.

The Control Protocol EAP in the Point to Point Protocol module C:\WINNT\System32\rasppp.dll returned an error while initializing. The network request is not supported.

Remote Access Connection Manager failed to start because the Point to Point Protocol failed to initialize. The network request is not supported.
 

-------------
And these are in the Event Viewer(Local)/Application
-------------

Unable to open the Disk performance object. Status code returned is data DWORD 0.

Unable to open the Server service. Server performance data  will not be returned. Error code returned is in data DWORD 0.

Unable to open the Redirector service. Redirector performance data  will not be returned. Error code returned is in data DWORD 0.

The description for Event ID ( 2001 ) in Source ( rasctrs ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .

-----------
And there's dozens in this same Application portion that look like this:

WMI ADAP was unable to create object index 2106 for Performance Library ContentFilter because no value was found in the 009 subkey

With different 4-digit numbers after "index"...

Are these errors are crucial?  Might they be causing these freezes?


Logged

 
alex732
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 7


Bookmark and Share

View Profile
« Reply #12 on: December 18, 2004, 12:59:46 AM »

Well I removed every entry for anything I could possibly find, which were only about 8 different Alexa things, still freezing.

Some more information:

Whenever my computer is accessing something, I hear something inside my tower make a deep click (Perhaps the hard drive?  Perhaps something on the motherboard/processor? -- Then in the next few seconds the application that happens to be accessing is unresponsive, and the computer freezes completely.  (Note:  In these few seconds of unresponsiveness, my computer's red accessing light is on, and remains on during the freeze.)
Logged

 
Cactus
Security & Virus Specialist
Global Moderator
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 4327


Bookmark and Share

View Profile
« Reply #13 on: December 18, 2004, 04:51:18 PM »

When was the last time you ran System Defrag

Run System Defrag

Start/Programs/Accessories/System Tools/Disk Defragmenter

See if that helps you any.

Cactus


Logged

**PLEASE**.....do not post your hijack log in someone else's thread. Start a separate thread HERE! Thank you.

cactus@mytechsupport.ca

My System Specs

Avg Antivirus::Ad-Aware::Spybot::Windows Update::Recuva
Malwarebytes::SUPERAntiSpywareFREE
Pages: [1] Go Up Print 
 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

Disclaimer
This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page September 01, 2017, 06:01:46 AM