Windows XP Home temporary freezes

[Peter Bowers]

Hello,
I am running Win XP Home SP2. When I start up, everything loads up to a
desktop situation, I then click my broadband icon and go immediatly on line,
but then when I click on IE or any other programme, I have to wait for 2-3
minutes before anything else will open. Ctrl/Alt/Del doesn't open then
either. I have tried system restore, but it kept telling me it coudn't
restore to the date selected, no matter how far back I tried. The same
happened in safe mode too. My system is AMD 1.83GHz 1.00 Gb RAM
Please advise.

 

[Gerry Cornell]

Peter

Look in the System and Application logs in Event Viewer for Warning and
Error Reports and post copies here.

You can access Event Viewer by selecting Start, Administrative Tools, Event
Viewer. When researching the meaning of the error, information regarding
Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;enus;308427&Product=winxp

A tip for posting copies of Error Reports! Run Event Viewer and double click
on the error you want to copy. In the window, which appears is a button
resembling two pages. Double click the button and close Event Viewer. Now
start your message(email) and do a paste into the body of the message. This
will paste the info from the Event Viewer Error Report
complete with links into the message. Make sure this is the first paste
after exiting from Event Viewer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Peter Bowers]

Thanks Gerry,
This is one of the error reports
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 13/12/2005
Time: 14:13:26
User: NT AUTHORITY\SYSTEM
Computer: MR-CD28F96D60C6
Description:
Windows saved user MR-CD28F96D60C6\Mr Bowers registry while an application
or service was still using the registry during log off. The memory used by
the user's registry has not been freed. The registry will be unloaded when
it is no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
This is another one
Event Type: Warning
Event Source: Microsoft Fax
Event Category: Devices
Event ID: 32068
Date: 13/12/2005
Time: 13:19:42
User: N/A
Computer: MR-CD28F96D60C6
Description:
The description for Event ID ( 32068 ) in Source ( Microsoft Fax ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: *, *.

 

[Gerry Cornell]

Peter

For Event ID: 1517 download and install the User Profile Hive Cleanup
Service
Download details: User Profile Hive Cleanup Service
http://snipurl.com/5b61

UPHClean v1.5e readme.txt
http://snipurl.com/ko8m

I haven't tried this but just follow the instructions in the lonk to see if
you can get more information about Event ID 32068 and post a copy of what
you get here:
http://snipurl.com/ksdh

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Peter Bowers]

Hi Gerry,
Thank you again for your input.
I have downloaded the uphclean prog. and the readme file. I can't see any
instructions as to activate it, so I assume it automatically works itself in
the background.
I cannot find any ref. to Event ID 32068 on the other site, but I did go to
techno babble on the computeractive site, but when I typed it in, it kept
changing it to Trigger event, which would cause a virus to activate itself.
I am using WinXP firewall and Norton System works for antivirus.
The event 32068 refers to fax, but I havn't got the windows fax facility
active on my computer!

Peter

 

[Gerry Cornell]

Peter

Have you checked in Event Viewer to see if the Event ID: 1517 messages have
stopped. There should be three new Information entries in the Event Viewer.

Event ID 1001 UPHClean started
Event ID 1201 UPHClean following handles in user profile hive have been
closed because they were preventing the profile from unloading
successfully
Event ID 11707 MsiInstaller User Profile Hive Cleanup Service
Installation completed successfully.

You should continue to see 1001 and 1201 every time you reboot.

Are you still get the freezes? Are Event ID: 32068 errors still appearing?


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Peter Bowers]

Hello Gerry,

I haven't had any more Event ID 1517 or 32068 errors since I installed
UPHCleanup, but it did freeze up again this morning, when I switched on,but
there were no error messages in the event viewer information window, but
there was a message in the system window. I want to thank you again for all
your input in this matter, as you must realize I am not computer literate.
The following new messages appeared in the event viewer yesterday.

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1001
Date: 15/12/2005
Time: 10:03:37
User: N/A
Computer: MR-CD28F96D60C6
Description:
User profile hive cleanup service version 1.6.30.0 started successfully.

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 15/12/2005
Time: 11:43:52
User: N/A
Computer: MR-CD28F96D60C6
Description:
Faulting application iexplore.exe, version 6.0.2900.2180, faulting module
unknown, version 0.0.0.0, fault address 0x01da7ab0.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 69 65 78 ure iex
0018: 70 6c 6f 72 65 2e 65 78 plore.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 75 6e 6b 6e 6f in unkno
0038: 77 6e 20 30 2e 30 2e 30 wn 0.0.0
0040: 2e 30 20 61 74 20 6f 66 .0 at of
0048: 66 73 65 74 20 30 31 64 fset 01d
0050: 61 37 61 62 30 0d 0a a7ab0..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 15/12/2005
Time: 11:44:02
User: N/A
Computer: MR-CD28F96D60C6
Description:
Fault bucket 229617765.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 32 39 36 31 37 37 36 22961776
0010: 35 0d 0a 5..

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1401
Date: 15/12/2005
Time: 14:52:49
User: MR-CD28F96D60C6\Mr Bowers
Computer: MR-CD28F96D60C6
Description:
The following handles in user profile hive MR-CD28F96D60C6\Mr Bowers
(S-1-5-21-854245398-764733703-725345543-1004) have been remapped because
they were preventing the profile from unloading successfully:

svchost.exe (1028)
HKCU (0x268)

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1010
Date: 15/12/2005
Time: 14:52:50
User: N/A
Computer: MR-CD28F96D60C6
Description:
User profile hive cleanup service stopped successfully.

The following message appeared in the event viewer system today, but I
haven't seen event ID 1201 or 11707.


..Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 16/12/2005
Time: 11:22:13
User: MR-CD28F96D60C6\Mr Bowers
Computer: MR-CD28F96D60C6
Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM
within the required timeout.

Thank you. Peter