Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer freezes for ~30 seconds every 2 minutes.


  • Please log in to reply
16 replies to this topic

#1 1Hz

1Hz

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 28 February 2009 - 04:23 AM

Last night my computer worked fine and nothing out of the ordinary happened - didn't download anything.

Today after I got home and switched on my computer, it started slowing down (or freezing I should say) randomly for ~30 seconds, about every 2-3 minutes. Other than that, things are running okay (I'm typing this post on it, and waiting when it freezes). Did a full scan under Avast and Malwarebyte's Antimalware, nothing out of the ordinary. Did a disk check, no errors, and restarting the computer doesn't improve the condition.

Here's the symptoms:

- In task manager and process explorer I don' see anything odd either, even when frozen/locked up the computer is under 10% usage.
- When my computer freezes in these intervals, the load/processing LED is solid blue (no blinking at all), so maybe something is trying to do something?
- Just before every freeze-up, teatimer reacts and the icon becomes active (the lock picture moves around), but no pop-ups or anything...so something is processing, or trying to.

Any help, or anyone know how I can see teatimer's active logs to maybe find these processes? . I don't see an option in teatimer to see anything, other than a log file of pop-ups such as registry changes.

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:07 AM

Posted 28 February 2009 - 08:20 PM

Hello I am moving this to the XP forum ( Correct me if wrong) as I don't feel it a malware issue and you will get better help there.

Spybot-S&D creates logs of TeaTimer's activity and stores them in the C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\ folder. See here.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 28 February 2009 - 09:27 PM

Actually, I'm using Vitsa HP (64 bit), sorry I forgot to state.

Also, I tracked down what I think is the right directory in Vista:

C:\Users\All Users\Spybot - Search & Destroy\Logs

and only found the registry change/notice logs, still nothing on the process/load logs (I wonder if teatimer even logs them?)

Tried

C:\Users\All Users\Application Data but says I can't access it (it was hidden)

Edited by boopme, 28 February 2009 - 10:01 PM.
Moved to VISTA ~~boopme


#4 Swordie

Swordie

  • Members
  • 792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Miami, Florida
  • Local time:06:07 AM

Posted 01 March 2009 - 12:07 AM

I think you might be under some sort of attack. Do they happen on a timed purpose?

Registry Changes..? Hmm... Might be some sort of Attack as I am assuming.. I hope your Firewall is up..
Who said I couldn't have everything?

#5 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 01 March 2009 - 12:53 AM

I mean I can only find the logs of recorded registry changes (all from weeks ago), I can't find the option on teatimer to view process logs (teatimer also checks newly loaded processes).

And no, it's pretty random, appears to be most frequent after I turn on or restart my computer, on average it's about once ever 2-3 minutes, but right now it's more like once every 5-10 minutes. So yeah...pretty random.

#6 Swordie

Swordie

  • Members
  • 792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Miami, Florida
  • Local time:06:07 AM

Posted 01 March 2009 - 12:56 AM

Hmm.. It's not an attack. Attacks are very well organized and planned. I think you might have some sort of item stuck. Maybe your firewall is interfering. Check the programs you have before a freeze, and during, and after. See if you have any sort of difference. You might have guessed right when you said it was a program trying to access.
Who said I couldn't have everything?

#7 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 01 March 2009 - 01:56 AM

Yeah, well at the moment the frequency is back at ~2 minutes.

When the computer freezes, I can't open task manager either, I have to have it up before the freeze (it still works during freeze), pretty much the only thing that works is my mouse cursor, the symptoms are kind of like a buffer overflow.

Strange that though everything is frozen and my LED is on solid blue, but says my usage is around 3-8% in the task manager and in process explorer.

If I could identify any files or applications or if I could see a spike in usage, then that would be a great help, but right now I'm in the dark.

#8 Swordie

Swordie

  • Members
  • 792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Miami, Florida
  • Local time:06:07 AM

Posted 01 March 2009 - 02:02 AM

If you do, tell us. It could be a memory leak or a CPU Overflow. Sounds like a buffer overflow though. You checked that it wasn't a overflow?
Who said I couldn't have everything?

#9 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 01 March 2009 - 02:33 AM

I have not...I don't know of any methods to check, any help?

#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:07 AM

Posted 02 March 2009 - 06:37 PM

Am I correct in assuming tha the overload is indicated by your hard drive light showing a solid light rather than a flickering?
If so, then it's most likely to be a overzealous program accessing your hard drive.

To check this out, open up Task Manager and go to the Processes tab.
Then click on the View menu item and select "Select Columns"
Then select I/O Reads and I/O Other (I/O Writes usually doesn't turn up much, but it won't hurt) and click OK
Resize the window so you can see the I/O Reads and I/O Other columns.
Wait for the freeze and see what's doing the most I/O Reads or I/O Other - that'll be the most likely culprit.
Let us know the Image Name for that process and we can make some suggestions.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#11 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 03 March 2009 - 12:00 AM

You are correct about the solid/flickering light part, on the ball!

I've done as you said (but I'm currently running Avast! again and Superantispyware, so those two have the highest atm, I'll check again when they're complete). So far multiple scans by Avast!, SAS, and Malwarebyte's AM have shown nothing, and hoping it stays that way, and yeah, the scans take 2x-3x as long due to the periodic freezeups.

Will report back in a bit, ty!

#12 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 03 March 2009 - 03:25 AM

Finished all scans - nothing found.

Anyways, I see csrss.exe having 398,923 I/O Reads as of now, but I've had my computer on for about 10 hours, so is that normal/okay? The .exe does about 10 I/O reads a second...okay, it's at 399,359 as of now.

#13 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:07 AM

Posted 03 March 2009 - 09:01 AM

csrss.exe issues are difficult to troubleshoot. The processes causing the lockups may only appear momentarily before sending csrss.exe off to do it's damage. Are there any other processes running high when csrss.exe goes off? To make this easy, double click on the I/O Reads column header - this will sort the output by the number of I/O Reads.

Try this free utility to see what threads are running underneath the csrss.exe process: http://www.microsoft.com/technet/sysintern...ssExplorer.mspx
Right click on the csrss.exe process, select Properties, then select the Threads tab.
Let us know what threads are running underneath it - and, if possible, do this when the system has frozen.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#14 1Hz

1Hz
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 03 March 2009 - 11:00 PM

Today I ran another chkdsk, it took a long time but fixed a few errors according to the logs. I've been running my computer for about 20 minutes so far and no problems, so I hope that will be the end of that...turns out the first chkdsk I ran failed but never noticed it.

If it does come back...under Process Explorer there are two instances of csrss.exe running, is that normal? I checked their running threads this morning and it appeared normal...even when frozen.

Anyways, if this is solved and doesn't occur again in the next 2 days, then thanks for the time invested in helping me, both of you!

#15 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:07 AM

Posted 04 March 2009 - 08:33 AM

2 csrss.exe processes are normal if you're viewing processes from all users.

The chkdsk issues may be due to several issues:
- there could be a program that's corrupting your file system through one of it's drivers
- there could be an issue with your hard drive physically
- there could be a corruption within Windows.

Repeated repairs by chkdsk "usually" point at a failing hard drive.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users