Freezes from time to time

Hi, I've been moved around a few topics, first trying to fix driver issues, then blue screen problems then finally malware. I've now ended up here because my computer just freezes sometimes at start up.
When it doesn't freeze my computer takes about 5 minutes to get to the log on screen! If I Idle my computer for another excess of 5 mins after logging on, it won't freeze, but during that time frame of 5 minutes, I experience bad screen lag at brief moments lasting around 2-5 seconds.

Sorry for the confusion, if any above, as it's difficult to put into words,

Thanks for helping

Thomas Gander,

Hello Thomas Gander. Lets see if we can get you running smooth again.

Firstly, would you please post a Speccy Snapshot? This will tell use a little about your system, then we can move forward.

Please also post a new BlueScreenView log:

Follow these steps:

• Download the app BlueScreenView here.
• Run the app and after the scan completes, go to the menu and select Edit > Select All
• Now go to the menu and select File > Save Selected Items, and save the file as "BSOD.txt"
• After saving, open "BSOD.txt" in notepad and paste the contents here.

For consistancy malware topic here: http://www.bleepingcomputer.com/forums/topic451542.html/page__p__2679466#entry2679466

Was told by mole to post here.

Also previous thread about his bsod issue here: (locked) http://www.bleepingcomputer.com/forums/topic450899.html/page__p__2673560#entry2673560

Those are assuming its about the same system which by how you word it, it is the same system.

The freezing could be caused by a number of things which we can go into trouble shooting but first we need more info,

Does it only do this at start up? Where does it freeze? At the starting windows screen or at the screen before the login box comes up? By chance do you know the manufacturer of the hard drive?

Firstly my BSOD's have stopped. I now only get freezes, It can freeze anywhere, from start up to being logged in.
The speccy application says this about my hard drive ;

Hard Drives
SAMSUNG HD502HJ SCSI Disk Device
Manufacturer SAMSUNG
Business Unit/Brand Desktop
Model Capacity For This Specific Drive 500GB
Interface ATA
Capacity 488GB
Real size 500,107,862,016 bytes
RAID Type None

So I would assume it's manufacturer is Samsung.
If you want to see more from speccy, heres the link http://speccy.piriform.com/results/Nax883zwG5w5Zf0AVixbVga

Hello again,

I have seen this type of freezing that you are describing on a few machines with issues with the hard drive so.. Please do the following,

First

Since samsung hard drives are now seagate.. Please run seatools found here: http://www.seagate.com/support/downloads/seatools/

Then if it finds any issues report them here.

Next if no errors or issues are found with seatools do the following:

From within Windows, open a Command Prompt window: Click on Start, Run, type in CMD and press Enter.
In that window, type
chkdsk /r
and press Enter. You'll be asked if you want to run chkdsk the next time the system restarts. Type in Y, press Enter, close the window, then reboot your PC.

Note: This WILL take a while to go through and do its checks and repairs, let it run all the way through. When it is done let your computer restart and run it for a while and see if the freezing still occurs.

sorry for the delay, conveniently there was a power cut near the end of the seatools scan, so please bear with me. I should have any issues uploaded tomorrow. Time to run the scan again...

Thanks again,

Thomas Gander

-EDIT-

AHA, luckily it must have finished just before!!! here's the results,

--------------- SeaTools for Windows v1.2.0.6 ---------------
07/05/2012 21:54:25
Unit Serial: 801130168383
Unit Model: SAMSUNG HD103SI
Model: HD103SI
Serial Number: S1VSJ9GSC01568
Firmware Revision: 1AG01118
Short DST - Started 07/05/2012 21:54:25
Short DST - Pass 07/05/2012 21:56:25
Long Generic - Started 07/05/2012 21:56:55
Identify - Started 07/05/2012 21:57:26
Long Generic - Started 07/05/2012 22:49:01
Long Generic - Pass 08/05/2012 07:54:08

I'll now start chk disk

Ok, I have finished chkdsk, give it about 2 days and we'll see if it freezes again ;P thanks.

Alrighty, Firstly, I tried to login, about 30 seconds after login, I received a blue screen.
Secondly, got logged in, opened internet explorer, screen crashed. XD
Finally, booted up in safe mode, logged in, about 5 seconds in - randomly restarts.
This time I managed to login without safe mode.

Hmm... lol. 3 different things. All I can tell you is the blue screen said roughly fltmgr.sys error exception 0x0000008E? I think off of the top of my head. Errm, also the blue screen froze so there's no log.

Finally, the loading up to the login screen is still slow, taking around 5 minutes still, however when I log in it has no problems at all.

Thanks

Thomas Gander

P.S. I had to use my old trick of waiting a few minutes before logging in to be able to post this. Happy Hunting!

This time I have the real codes, first one I saw was error 0xc0000221, second, again the bluescreen log didnt save as a minidump but the error was 0x0000008E - Again

Alright one last thing I want to try..

Please do the following to test your ram. Since everything else seems to have checked out and your file system should be ok.. Im hoping that its a ram issue. Let me know how it turns out and as always if you have any issues please ask.

***** A. If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...

1. Download - Pre-Compiled Bootable ISO (.zip)
2. Unzip downloaded memtest86+-....iso.zip file.
3. Inside, you'll find memtest86+-....iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:



8. Locate memtest86+-....iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:



10. Once the CD is created, boot from it, and memtest will automatically start to run.

The running program will look something like this depending on the size and number of ram modules installed:




It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.



The following image is the test results area:



The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.

No errors this time 5/5 pass streak

You seem to have a ton of different programs installed, including P2P programs.

FWIW: http://forums.ijji.com/showthread.php?t=1159677

Any one of those programs could be damaged and unintentionally or intentionally causing your problems, IMO.

I suggest taking a look via Event Viewer...at the errors noted...which approximate the timing of your freezes.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/topic40108.html

The focus is on errors, not warnings or information items listed in EV.

Louis

These are the errors that i think happened when my computer crashed, also there seemed to be many warning messages regarding my cd-rom, even though not in use. Don't know if it's connected with my crashes so I didn't put it down. There was more than this but I didn't put them down, If you want ALL of the errors just say so and I'll put them in a .txt

Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 09/05/2012 17:45:07
Event ID: 4609
Task Category: Event System
Level: Error
Keywords: Classic
User: N/A
Computer: Thomas-PC
Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043c from line 45 of d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="49152">4609</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-05-09T16:45:07.000Z" />
<EventRecordID>56573</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Thomas-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp</Data>
<Data Name="param2">45</Data>
<Data Name="param3">8007043c</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 07/05/2012 18:52:46
Event ID: 1010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Thomas-PC
Description:
The Collect Procedure for the "EmdCache" service in DLL "C:\Windows\system32\emdmgmt.dll" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
<EventID Qualifiers="49152">1010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-05-07T17:52:46.000Z" />
<EventRecordID>56388</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Thomas-PC</Computer>
<Security />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib">
<param1>EmdCache</param1>
<param2>C:\Windows\system32\emdmgmt.dll</param2>
<binaryDataSize>4</binaryDataSize>
<binaryData>D9060000</binaryData>
</EventXML>
</UserData>
</Event>
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 04/05/2012 18:06:54
Event ID: 3001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Thomas-PC
Description:
The performance counter name string value in the registry is not formatted correctly. The malformed string is 15178. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" EventSourceName="LoadPerf" />
<EventID Qualifiers="49152">3001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-05-04T17:06:54.000Z" />
<EventRecordID>56109</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Thomas-PC</Computer>
<Security />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>15178</param1>
<binaryDataSize>16</binaryDataSize>
<binaryData>4A3B0000483B0000493B0000C3010000</binaryData>
</EventXML>
</UserData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 07/05/2012 18:52:46
Event ID: 1010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Thomas-PC
Description:
The Collect Procedure for the "EmdCache" service in DLL "C:\Windows\system32\emdmgmt.dll" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
<EventID Qualifiers="49152">1010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-05-07T17:52:46.000Z" />
<EventRecordID>56388</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Thomas-PC</Computer>
<Security />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib">
<param1>EmdCache</param1>
<param2>C:\Windows\system32\emdmgmt.dll</param2>
<binaryDataSize>4</binaryDataSize>
<binaryData>D9060000</binaryData>
</EventXML>
</UserData>
</Event>
Log Name: Application
Source: Application Error
Date: 11/05/2012 17:46:05
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Thomas-PC
Description:
Faulting application svchost.exe_SysMain, version 6.0.6001.18000, time stamp 0x47918b89, faulting module sysmain.dll, version 6.0.6002.18005, time stamp 0x49e03808, exception code 0xc0000005, fault offset 0x00004e7f, process id 0x5bc, application start time 0x01cd2f954e5bfb4c.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-05-11T16:46:05.000Z" />
<EventRecordID>56946</EventRecordID>
<Channel>Application</Channel>
<Computer>Thomas-PC</Computer>
<Security />
</System>
<EventData>
<Data>svchost.exe_SysMain</Data>
<Data>6.0.6001.18000</Data>
<Data>47918b89</Data>
<Data>sysmain.dll</Data>
<Data>6.0.6002.18005</Data>
<Data>49e03808</Data>
<Data>c0000005</Data>
<Data>00004e7f</Data>
<Data>5bc</Data>
<Data>01cd2f954e5bfb4c</Data>
</EventData>
</Event>

Can you please run Seatools for DOS instead of for windows. Please download the Bootable CD from Seagate and perform the tests outside of windows.

Once again I passed, I've noticed that the freezing has halted as it hasn't frozen once today.