Does XP need another patch for this??

[Paul]

Hi all,

I'm not too sure if Avast (ashserv.exe) , is causing this prob, but it
happens sometimes, when I open some folders in my computer (XP x32 SP3).

The error in event viewer is the same as this

http://support.microsoft.com/kb/891608

However, as above, I'm not using the OS's on this site

The above site points to this

http://support.microsoft.com/kb/841356/

Which obviously I dont need (and it probably wont work)
since its only for SP1.

I'm also getting this error

Windows cannot unload your classes registry file - it is still in use by
other applications or services. The file will be unloaded when it is no
longer in use.

I see Uphclean (User Profile Hive Cleanup service) is meant to fix this, but
this is installed. So, why would this error appear now?

Any info appreciated

Thanx

 

[Gerry]

Paul

Can you please post the copies of the Error Reports from Event Viewer.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[PA Bear [MS MVP]]

Did this behavior start only after you'd installed WinXP SP3?

Is the machine fully patched at Windows Update currently?

====================================

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

 

[Paul]

I'm using Avast, Trojan remover and Malwarebytes.

I'm positive, that I've got no malware/spyware/adware/trojans/viruses

It is fully patched and up to date PA

I think this behaviour has something to do with Avast
since its only happened (its the first time, I've seen the shell restarted
entry in event viewer), when I opened folders in my computer.

When it froze (I did notice ashserv was using 50% + CPU usage), I had to
kill the process, (my computer), thats when the error:

The shell stopped unexpectedly and Explorer.exe was restarted. appears in
event viewer

It didnt happen straight after SP3 was installed (I slipstreamed SP3). XP
has been installed for about 3-4 months now

Heres the Userenv entry

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 8/16/2008
Time: 9:37:50 PM
User: SPEEDY\Paul
Computer: SPEEDY
Description:
Windows cannot unload your classes registry file - it is still in use by
other applications or services. The file will be unloaded when it is no
longer in use.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I'll have to wait for it to happen again (For my computer to freeze again).
So I can post the 1002 error log

Thanx

 

[Paul]

One thing I forgot to mention is, it has happened more than once, and
previously, when I killed explorer's process everything disappeared.

The icons on the taskbar, and the desktop icons disappeared, and they didnt
come back.

I had to reboot to fix it