Explorer.exe complications

[Guest]

My explorer.exe is on the fritz. If I try to move files, or delete files its
almost an instant freeze. 5 mins of letting it sit it unfreezes. It will let
u do a couple things and then freeze again. This happens with and w/o being
connected to the internet.

Moreover, I don't have any spyware, malware, viruses or worms that I know
of. I've used spybot, noadware, xoftspy, spybouncer, adware microsft
antispyware and one or two other similar programs to no avail. My antivirus
protection is NOD32. I have run trend micro & symatec online scanners and
nothing at all comes up. I also didn't see anything in my hijackthis log.

However, I did see a slight increase in performance when I did the
following: Internet Explorer>Tools>Options>General>Settings>View Objects and
deleted 2 objects that were listed as unknown. After which, I ran the scans
again and found nothing.


WinXP Home Edition + all updates

 

[Gerry Cornell]

How are you selecting the Move or Delete commands?

Please post copies of Error Reports in Event Viewer.

You can access Event Viewer by selecting Start, Administrative Tools,
Event Viewer.
When researching the meaning of the error, information regarding Event
ID, Source
and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&Product=winxp

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the
error you want to copy. In the window, which appears is a button
resembling two
pages. Double click the button and close Event Viewer. Now start your
message
(email) and do a paste into the body of the message. This will paste the
info from the
Event Viewer Error Report complete with links into the message. Make
sure this is
the first paste after exiting from Event Viewer.


--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

I didn't expect such a fast response. I am not at the desktop with the error
at the moment. However, I can answer the question: 1) Delete = Shift + Del,
and I have tried just hitting the delete button; 2) Move = Drag Drop, and I
tried used the command on the left side of the window that says move files.
Sometimes any of these actions works sometimes not. When it doesn't explorer
comes to a complete hault. I can't start any new programs I can't even access
task manager most of the time.

 

[Gerry Cornell]

How about copies of Error Reports? Look in the Application as well as
the System section.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Is this what you were looking for? These are the repeated errors that I see
in the event viewer.

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/10/2005
Time: 12:14:20 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
Hanging application mirc.exe, version 6.1.4.0, hang module hungapp, version
0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 6d 69 72 63 2e 65 mirc.e
0018: 78 65 20 36 2e 31 2e 34 xe 6.1.4
0020: 2e 30 20 69 6e 20 68 75 .0 in hu
0028: 6e 67 61 70 70 20 30 2e ngapp 0.
0030: 30 2e 30 2e 30 20 61 74 0.0.0 at
0038: 20 6f 66 66 73 65 74 20 offset
0040: 30 30 30 30 30 30 30 30 00000000

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/10/2005
Time: 12:14:20 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
Hanging application mirc.exe, version 6.1.4.0, hang module hungapp, version
0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 6d 69 72 63 2e 65 mirc.e
0018: 78 65 20 36 2e 31 2e 34 xe 6.1.4
0020: 2e 30 20 69 6e 20 68 75 .0 in hu
0028: 6e 67 61 70 70 20 30 2e ngapp 0.
0030: 30 2e 30 2e 30 20 61 74 0.0.0 at
0038: 20 6f 66 66 73 65 74 20 offset
0040: 30 30 30 30 30 30 30 30 00000000

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 11/9/2005
Time: 9:51:38 PM
User: NT AUTHORITY\SYSTEM
Computer: TOMMIE-YPA7B2IH
Description:
Windows saved user TOMMIE-YPA7B2IH\Tommie registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: atapi
Event Category: None
Event ID: 9
Date: 11/10/2005
Time: 2:08:04 PM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
The device, \Device\Ide\IdePort1, did not respond within the timeout period.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 50 00 01 00 a4 00 ..P...¤.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 00 01 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 07 00 00 00 ........
0038: 40 00 00 0e 00 00 00 00 @.......
0040: 00 00 06 12 08 01 00 00 ........
0048: 00 00 00 00 01 00 00 00 ........
0050: 00 00 00 00 58 89 13 83 ....X‰.ƒ
0058: 00 00 00 00 e8 e7 0a 83 ....èç.ƒ
0060: 01 00 00 00 00 00 00 00 ........
0068: 00 00 00 00 00 00 00 00 ........
0070: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 11/10/2005
Time: 8:04:28 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
The following boot-start or system-start driver(s) failed to load:
cdudf_xp

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[Gerry Cornell]

Do you have Easy Creator? If yes what version? Alternatively do you have
UDF VOLUME READER 7.1.0.95?

Event 9 I have asked for advice on the merits of a suggested solution
found in Google.

Try Start, Administrative Tools, Service. In the Log On As are any
services listed as anything other than Local System, Local Service or
Network Service? If yes please name the service.

Have made a conscious decision to install the mIRC Internet Relay Chat
utility? If not you could have a virus and should run a full anti-virus
scan using updated virus definitions.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

1) I previously had roxio easy media creator 7.0 then 7.5 and even version
8.0 but they have been uninstalled.

2) I have never manually installed UDF VOLUME READER. Should I install it?

3) In the Log On As Colume everything was listed as Local System, Local
Service, and Network Service.

4) Do you mean uninstall? Mirc is installed on my computer. I just
uninstalled completely and reinstalled.

5) As stated before I have been through a slew of anti-virus and
anit-spy/ad/malware programs. All say Im clean. I did have the CWS.Homepage
infection but that had been long ago cleaned, and never reaccured.

 

[Guest]

This is more event viewer info I noticed around when I first started having
this trouble. I don't know if its related or not. Additionally, event 9 from
the previous post was very redundant about once or twice an hour all day.
However today it has not occurced as often. Last night I uninstalled and
reinstalled mirc.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 11/4/2005
Time: 7:15:19 PM
User: TOMMIE-YPA7B2IH\Tommie
Computer: TOMMIE-YPA7B2IH
Description:
A provider, OffProv11, has been registered in the WMI namespace,
Root\MSAPPS11, to use the LocalSystem account. This account is privileged
and the provider may cause a security violation if it does not correctly
impersonate user requests.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.




Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 11/8/2005
Time: 10:00:16 PM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
Faulting application iexplore.exe, version 6.0.2900.2180, faulting module
mshtml.dll, version 6.0.2900.2769, fault address 0x00069da3.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 69 65 78 ure iex
0018: 70 6c 6f 72 65 2e 65 78 plore.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 6d 73 68 74 6d in mshtm
0038: 6c 2e 64 6c 6c 20 36 2e l.dll 6.
0040: 30 2e 32 39 30 30 2e 32 0.2900.2
0048: 37 36 39 20 61 74 20 6f 769 at o
0050: 66 66 73 65 74 20 30 30 ffset 00
0058: 30 36 39 64 61 33 0d 0a 069da3..


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 11/10/2005
Time: 8:04:28 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
The Mega DV(Video) service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[Gerry Cornell]

The Roxio message could be that you need an updated driver or that when
you uninstalled the system did not remove all registry entries. What CD
/ DVD software are you using in lieu of Easy Creator. If your CD / DVD
software is working fine download cCleaner and it most likely will
remove the redundant registry entry.

I would download and install cCleaner
http://www.ccleaner.com/ccdownload.asp
http://www.ccleaner.com/

Once you have installed cCleaner create a new System Restore point.
http://bertk.mvps.org/html/createrp.html

Next start cCleaner and select the Issues tab and check all boxes.
Select scan and then check all boxes before the Issues identified and
click on Fix. If anything subsequently seems wrong you can always you
use the System Restore point to put the Registry back to what it was
before running cCleaner. Otherwise you need to proceed slowly with
cCleaner. Try out bits at a time to see how it works and what it does.

Having uninstalling and reinstalling the Mirc are you still getting any
new copies of this report on your Application tab in Event Viewer

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/10/2005
Time: 12:14:20 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
Hanging application mirc.exe, version 6.1.4.0, hang module hungapp,
version
0.0.0.0, hang address 0x00000000.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

I have already done the cCleaner scans. About 2 or 3 times a week. However,
today an update was released so it picked up a couple new things.

Event 9 I notice only occurs when my computer is idle. Overnight it happened
about once every hour (about 7 times) but doesn't cause any issues that i've
noticed. I have not seen this error when my computer hangs. Im going to fully
install then uninstall roxio 8 to hopefully remove it fully. I started an
install of it last week and cancelled it.

Moreover, my computer hanged a couple times last night. It only happens when
I go in a window and try to delete or move around files. Then my computer
locks up and then unlocks like 4 or 5 mins later.

Here is a list of the errors that occur around when the computer hangs.
Note: there where no listed aplication hangs in the event viewer for more
than 24 hrs. eventhough my computer did hang-up a few times.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 11/11/2005
Time: 1:29:45 AM
User: NT AUTHORITY\SYSTEM
Computer: TOMMIE-YPA7B2IH
Description:
Windows saved user TOMMIE-YPA7B2IH\Tommie registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 11/11/2005
Time: 1:31:45 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
The following boot-start or system-start driver(s) failed to load:
cdudf_xp



Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 11/11/2005
Time: 1:30:33 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
The IP address lease 192.168.1.100 for the Network Card with network address
0007E94C749A has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

 

[Gerry Cornell]

The full name of your driver is "cdudf_xp.sys". It should be located in
your C:\Windows\System32\Drivers folder. Is it there? What is the file
version date and size?

Make sure you can see hidden files by selecting Start, Control Panel,
Folder Options, View, Advanced Settings and verify that the box before
"Show hidden files and folders" is checked and "Hide protected
operating system files " is unchecked. You may need to scroll down to
see the second item. You should also make certain that the box before
"Hide extensions for known file types" is not checked.

Uninstalling Easy Creator 8 and reinstalling could solve the problem.
Don't forget to run Disk Defragmenter after reinstalling.

Something else you could try. Select Start, Run, type "regedit" without
quotes and hit Enter. Place the cursor on My Computer and select Edit,
Find and search for "cdudf_xp.sys" without the quotes. Keep selecting
Find Next and you should find two lines where
"C?\Windows\System32\Drivers\ cdudf_xp.sys" appears in the Data column
( far right of screen ). You will a number of other results but I think
we should only be interested in file paths. Check that the file path
matchs C?\Windows\System32\Drivers\ cdudf_xp.sys. If it varies please
let me know. I am relying on your Easy Creator being the same as mine,
which is Easy Creator 6, so we may encounter variations because you have
version 8.

I need to do some research on your other errors and some paid work so I
will get back to you later on those errors.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

LOL Thankfully, today is a holiday and its a paid day off as was election
day. Thanks alot im going work on the things you just listed.

 

[Guest]

1) Cdudf_xp.sys. I have a question I installed and uninstalled version 8 of
roxio/sonic media creator running disk defragmenter before and after. The
version in my system32 folder is 7.5.0.47 dated 3/8/2005, size 284kb size on
disk 288kb. Additionally, I have no sonic/nero products on my pc especially
not drag to disc because I had nero incd at one point and you cant have incd
and drag-to-disc at the same time. Thus, I ask is it safe to delete this
driver? If so will shift delete effectively remove it?

P.S. It only appeared once in regedit>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\\C:\WINDOWS\system32\drivers\Cdudf_xp.sys

2) I have noticed that my computer only freezes when I enter my downloads
folder for mirc. When I uninstalled I removed the folder completely and
placed some of the partial downloads back in. However, the problem still
remains where I hang up if i try to move or delete files in the folder. But
in about 5 mins im allowed to maneuver again.

I have 1GB pc 3200 dual LT of ram and a 80 gig hard drive.

 

[Gerry Cornell]

With Easy Creator 6 installed I have these two keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC4C83FED8089EC4097A9B2C193D5155

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs

My feeling is that the Cdudf_xp.sys and the Registry Key on your system
have been left over from your uninstallation of Easy Creator 7.5 but I
am reluctant to advise on their removal.

However, I have found this answer in the Roxio Knowledge Base relating
to Easy Creator 6.
http://snipurl.com/jslz

Does Mirc load in Safe Mode. If not try uninstalling in Safe Mode.
http://www.mirc.co.uk/help/uninstall.html

Do not forget there is also a trojan:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.o.html

There may be more than one!

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Gerry Cornell]

Can you provide details of your Network Card and Router. How frequent is
this error message?


--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Gerry Cornell]

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 11/10/2005
Time: 8:04:28 AM
User: N/A
Computer: TOMMIE-YPA7B2IH
Description:
The Mega DV(Video) service failed to start due to the following error:
The system cannot find the file specified.


I think you have a Camcorder! Does the above Error Report appear often?
Have you uninstalled the software or? What is the makers name and model
of the Camcorder?

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

The problem with Cdudf_xp.sys was fixed when in fully installed 8.0 and
uninstalled it. I no longer get that error.

The error with mirc I figured out. My antivirus system is NOD32. It has a
feature I think ANOM thats an active scan. The way it was configured it
automatically scans folders when its accessed. I had a lot of downloads going
so it locked up the computer when tryin to scan my downloads folder that had
about 16 gigs worth of .rars. & . tars.

Thus, I configured the scanner to exclude the folder and the problem no
longer occured. This is a step i must have initially skipped. I never had the
issue before and i had been using nod 32 for around 6 mths.

 

[Guest]

1)The camera is an aiptek dvd 3100. I fully uninstalled it and the error
still occurs but it is not too frequent.

2) I found a fix for error 1517 from microsoft.com.

3) EVENT 9 is still present, it occurs about 10 to 15 times a day. It
doesn't effect system performance that I have noticed. In the links provided
in event viewer it spoke of dirty or error plagued discs. The drives are
empty with no kind of media present.

 

[Gerry Cornell]

Sheisty

What you have to say could be very useful information for someone else
with the same problem searching Google.

Thanks for putting it on record.


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Linksys
BEFSR41
EtherFast® Cable/DSL Router with 4-Port Switch

This occurs once or twice a day. It will be about 4 hrs until I have access
to the problem pc again. Dhcp gets an error in the event log that pertains to
renewing my ip address.