Windows XP. Computer continually stops responding

[KWB]

My computer has suddenly started not responding. This happens with All my
programs and when on the internet. I have to disconnect the power and restart
to clear the problem. It then locks up again as soon as I start a program.
Computer works fine in safe mode with networking EXCEPT in safe mode I do not
have any audio devices loaded so cannot use Skype. I have tried system
restore but it will not let me pick a restore point earlier than the day
before. Can anyone help

 

[Gerry]

KWB

How much RAM memory does your computer have?

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

Open Disk Defragmenter and click on Analyse. Select View Report and
click on Save As and Save. Now find VolumeC.txt in your My Documents
Folder and post a copy. Do this before running Disk Defragmenter as it
is more informative.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[KWB]

Gerry, Thanks for the input. I have lots of Ram 2Gb.
Under Task Manager Performace it shows Total 142000, Limit 1259000 and Peak
149000 which is fine. Tried Defrag, Disc cleanup, antivirus, and run CC
Cleaner and Registry cleaner all without success.
Any other thought would be appreciated
Ken

 

[Gerry]

Ken

I was asking for information from Disk Defragmenter as it is often an
easy way to get background system information.

Open Disk Defragmenter and click on Analyse. Select View Report and
click on Save As and Save. Now find VolumeC.txt in your My Documents
Folder and post a copy. Do this before running Disk Defragmenter as
it is more informative.

Check the System log of Event Viewer for Error Reports.

Please post copies of all Error and Warning Reports appearing in the
System log in Event Viewer for the last boot. No Information Reports or
Duplicates please. Indicate which also appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Try disabling all Add-0ns in Internet Explorer. Tools, Manage Add-Ons,
Enable or Disable Add-Ons. You can test each in turn by enabling one by
one and observe for effect.

Have you tried checking in Task Manager to see whether any process is
showing unexplained CPU usage?

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[KWB]

Hi Gerry,
Thanks for the additional information. Have done the steps you advise but do
not know how to add attachments to a post in the dsicussion group. If you can
send an E mail to me at (e-mail address removed) I can send them. Task manager shows
very little CPU usage. 4-6%. I have done a defrag analyse and the C volume
report shows Vol 74GB Used space7GB Fragmentation 1%
Total MFT 74MB MFT Record count 66924 %MFT in use 88%

In the event log there are hundreds of information entries mostly saying
something was started. There are several errors and warnings over the last
two days as follows.
Following boot start failed to load. eeCtrl; Fips; intelppm; SAURTPEL;
SPBBCDrv; and SYMTDI
Application Layering Gateway failed to start.
DCOM got error. Service cannot be started in safet mode
Warnings were; Windows defender detected changes to the system and
The DHCP Client Service depends on the Net Bios Tcpip service which failed
to start due to a device not running.

By the way I have 512MB Ram not 2GB as previously advised.
Hope this helps and thanks for your help.
Ken

 

[Gerry]

KWB

Just copy and paste into the body of the message. You do not need to
send files as attachments.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[KWB]

Hi Gerry,Here is the volume info you wanted. Still working on event log.
When further reviewing event log 99% of errors were Äpplication Management
Services terminated with the following error. Module could not be found. Hope
this helps
Volume S3A4000D003 (C
Volume size = 74.28 GB
Cluster size = 4 KB
Used space = 17.35 GB
Free space = 56.94 GB
Percent free space = 76 %

Volume fragmentation
Total fragmentation = 0 %
File fragmentation = 1 %
Free space fragmentation = 0 %

File fragmentation
Total files = 59,927
Average file size = 370 KB
Total fragmented files = 643
Total excess fragments = 3,199
Average fragments per file = 1.05

Pagefile fragmentation
Pagefile size = 756 MB
Total fragments = 1

Folder fragmentation
Total folders = 6,913
Fragmented folders = 37
Excess folder fragments = 260

Master File Table (MFT) fragmentation
Total MFT size = 74 MB
MFT record count = 66,924
Percent MFT in use = 88 %
Total MFT fragments = 2

--------------------------------------------------------------------------------
Fragments File Size Most fragmented files
445 28 MB \WINDOWS\system32\config\software
210 28 MB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP5\snapshot\_REGISTRY_MACHINE_SOFTWARE
158 635 KB \WINDOWS\ntbtlog.txt
106 8 MB \WINDOWS\system32\config\system
94 92 KB \WINDOWS\system32\config\software.LOG
85 10 MB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6\snapshot\_REGISTRY_MACHINE_SYSTEM
75 544 KB \Documents and Settings\K.W
Bowker\ntuser.dat.LOG
64 1,024 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP5\change.log.13
63 1,024 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP5\change.log.14
63 1,024 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6\change.log.1
62 276 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP5
53 841 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6\change.log.2
46 211 KB \WINDOWS\WindowsUpdate.log
42 168 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6
41 2 MB \WINDOWS\system32\Restore\rstrlog.dat
39 4 MB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6\A0025192.exe
36 12 MB \Program Files\Quicken\BACKUP\HOME081.QDF
34 135 KB \WINDOWS\EventSystem.log
29 455 KB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP5\change.log.16
27 3 MB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6\A0025186.exe
27 0 bytes \Program Files\Yahoo!\NAV\Savrt\0719NAV~.TMP
25 6 MB \Documents and Settings\All
Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate
21 1 MB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP4\A0000046.msi
21 2 MB \System Volume
Information\_restore{2A8A1FC7-6452-4AFF-9853-CFA56DEF7433}\RP6\A0025188.dll
20 80 KB \Documents and Settings\K.W Bowker\Local
Settings\Temporary Internet Files\Content.IE5\DARYZD45
20 320 KB \Documents and Settings\K.W Bowker\Local
Settings\Temporary Internet Files\Content.IE5\index.dat
19 672 KB \Documents and Settings\K.W
Bowker\Application Data\Sereniti\Active Security Monitor\ASMonitor.log
17 64 KB \WINDOWS\system32\wbem\Logs\wbemess.lo_
17 72 KB \Documents and Settings\K.W Bowker\Local
Settings\Temporary Internet Files\Content.IE5\ETRZFCM0
16 2 MB \Documents and Settings\K.W Bowker\Local
Settings\Temp\IMT83.xml

KWB

 

[Gerry]

Ken

Please post complete copies of the Event Viewer Reports relating to the
Application Layering Gateway failed to start and The DHCP Client Service
depends on the Net Bios Tcpip service which failed to start due to a
device not running. Most of the other reports seem to relate to you
running in Safe Mode and are therefore not able to carry out certain
tasks because you are in safe mode.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

"Äpplication Management Services terminated with the following error.
Module could not be found." Do you have Windows XP Home Edition? If yes
this is a bug which Microsoft have not fixed and is safely ignored.

Sereniti Active Security? Have you tried disabling this programme to see
what effect it has on your problem?

Earlier I made these suggestions. Did you try them?

Try disabling all Add-0ns in Internet Explorer. Tools, Manage Add-Ons,
Enable or Disable Add-Ons. You can test each in turn by enabling one by
one and observe for effect.

Have you tried checking in Task Manager to see whether any process is
showing unexplained CPU usage?

In your original post you mentioned using a Registry Cleaner. These are
not recommended because they can serously damage the Registry and when
used and not causing damage they provide a neglible benefit in terms of
better performance. cCleaner is OK , except you would be advised not to
use the Registry Cleaner component.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[KWB]

Hi Gerry,
I disabled all the add-ons which did reduce the number of times the computer
stopped responding but did not eliminate problem.
Task Manager does not show any unexplained CPU usage.
I use CC Cleaner and also the Registry cleaner component. I back up the
changes but delete them after a few days. This may be part of the problem.
I really appreciate the help you have given. Also thanks for the training
program on pasting info to this site. Below is the info you requested.
Regards, Ken
-- Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 17/03/2008
Time: 3:46:47 PM
User: N/A
Computer: GOLFER-27BBAABD
Description:
The DHCP Client service depends on the NetBios over Tcpip service which
failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 17/03/2008
Time: 4:44:33 PM
User: N/A
Computer: GOLFER-27BBAABD
Description:
The Application Layer Gateway Service service failed to start due to the
following error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 17/03/2008
Time: 3:46:47 PM
User: N/A
Computer: GOLFER-27BBAABD
Description:
The TCP/IP NetBIOS Helper service depends on the AFD service which failed to
start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

KWB

 

[KWB]

Gerry,
Additional comments.
Yes I have windows XP home Edition.
You mention disabling Sereniti active security monitor. What is this. To my
knowledge I do not have this. I have Norton, Windows defender, Privacy
Guardian, Ad-aware and Spybot.
In event viewer, Applications, I have numerous errors relating to the
following. Is this information any use.
Ken
--Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 19/03/2008
Time: 6:55:09 PM
User: N/A
Computer: GOLFER-27BBAABD
Description:
Hanging application iexplore.exe, version 7.0.6000.16608, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 37 re.exe 7
0020: 2e 30 2e 36 30 30 30 2e .0.6000.
0028: 31 36 36 30 38 20 69 6e 16608 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000

KWB

 

[KWB]

Hi Gerry,
I didn,t realise that Sereniti was AOL Active security monitor. I have
exited the system, disabled all add-ons and the computer still does not
respond. It is also extremely slow. It takes 1-2 mins to open a program.
In safe mode the computer is extremly fast on both using programs and when
on the internet
Ken
KWB