Win2000 & explorer.exe ??

[Tony_H]

Hi,

desperate for help here... running 2000 SP4, IE6 SP1, on
a Pentium III 750 MHz, 192 MB RAM.
Recently my PC has been rebooting itself unattended, this
I believe is due an explorer.exe problem. If I look at
the Task manager, My Toatl Kernel memory ( NonPaged ) is
increasing by 4K every second. Also my Page faults is
increasing simultaneously ( against explorer.exe )

Also, my ability to connect to the Internet and mail lasts
only a few minutes before it disconnects me, HOWEVER, if I
have an IRC client open this is maintained even though my
IE or Mail effectively dies. If I boot up into safe mode,
I have full access to the Internet and mail.

Does anyone have any idea what is happening to my PC ? I
have run A/V SW but nothing was detected.

Will be most grateful for any clues as to what is
happening and how I can resolve this issue.

Unfortunately, I cannot reinstall windows as I have an
application that cannot be reinstalled..


Many Thanks in advance,

Tony

 

[Alphonse]

Thoughts that come to mind to a non-win2k expert :
- Check services, specially ones w/o descriptions
- Win2k Server or Adv Server? disable IIS, Terminal Services, Telnet...
- Check the time and date of Explorer.exe - recopy from CD while in Safe
mode
- Trojan
- Can it be networked and virus-scanned from other PC? (has worked for me
when
viruses manage to fool my client's AV)
- Run, RunOnce registry keys

Anyone else?

: Hi,
:
: desperate for help here... running 2000 SP4, IE6 SP1, on
: a Pentium III 750 MHz, 192 MB RAM.
: Recently my PC has been rebooting itself unattended, this
: I believe is due an explorer.exe problem. If I look at
: the Task manager, My Toatl Kernel memory ( NonPaged ) is
: increasing by 4K every second. Also my Page faults is
: increasing simultaneously ( against explorer.exe )
:
: Also, my ability to connect to the Internet and mail lasts
: only a few minutes before it disconnects me, HOWEVER, if I
: have an IRC client open this is maintained even though my
: IE or Mail effectively dies. If I boot up into safe mode,
: I have full access to the Internet and mail.
:
: Does anyone have any idea what is happening to my PC ? I
: have run A/V SW but nothing was detected.
:
: Will be most grateful for any clues as to what is
: happening and how I can resolve this issue.
:
: Unfortunately, I cannot reinstall windows as I have an
: application that cannot be reinstalled..
:
:
: Many Thanks in advance,
:
: Tony

 

[Tony_H]

Okay, Have gone into services and closed down all that I
can. There is one which will not shut down and that is
Telephony Services. Processes left running are...
explorer ( still increasing on Page Faults ), svchost,
mmc, SERVICES, TASKMGR, svchost, WINLOGON,LSASS, system,
CSRSS, and SMSS.

NO trojans or viruses detected ( AV signature as at 11th
July ).

Scanned as a network drive from a known clean pc.

Am at a total loss now

Help ?

Tony