Vista - Vista Business x64 SP1 keeps locking up, PC Freezing

**sbarak** · 09-25-2008

I have an HP xw9400 Workstation with Vista Business x64 SP1.

Every day or other day the entire system just locks up, no screen of death, just everything is frozen. When it freezes I cannot move the mouse, use the keyboard, I do not see any movement from any taskbar or gadget bar icons so I know the system is completely locked up and its not just a mouse/keyboard issue. I also removed the wireless mouse/keyboard and used USB and PS2 connect mouse/keybard and still freezing.

I upgraded the BIOS
Made sure I have all the latest Windows Updates
Upgraded all the drivers I can think of
Upgraded the SAS controller firmware
Made sure Kaspersky is always running and up to date (anti virus/firewall enable)
Uninstalled any software I did not think is needed.
Made sure the PC is connected to a UPS and that the UPS is functioning well.

I am not sure what else to do any help will be greatly appreciated.

I used ERUNT to backup the reg and ran hijackthis v2.0.2, below is the report, I did not fix the hijackthis scan.

Logfile of Trend Micro HijackThis v2.0.2

Code:

 
Scan saved at 7:25:07 PM, on 9/25/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
 
Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHosttr.exe
C:\Program Files (x86)\Hewlett-Packard\HP Media Vault\Utilities\HPMVTray.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files (x86)\Common Files\NewTech Infosystems\Scheduler\Schdlr32.exe
C:\Program Files (x86)\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files (x86)\ACT\Act for Windows\Act.Outlook.Service.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files (x86)\Internet Explorer\IEUser.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil9f.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = CNN.com - Breaking News, U.S., World, Weather, Entertainment & Video News
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts file is located at: C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile - {D5233FCD-D258-4903-89B8-FB1568E7413D} - mscoree.dll (file missing)
O3 - Toolbar: Passward_IExplorer - {45AC8D9F-5C3B-4802-8667-2702E27A3D08} - C:\Program Files (x86)\Passward\Passward_IExplore.dll
O4 - HKLM\..\Run: [PTHOSTTR] "C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" /Start
O4 - HKLM\..\Run: [HPMVTray] "C:\Program Files (x86)\Hewlett-Packard\HP Media Vault\Utilities\HPMVTray.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [NTI Scheduler] "C:\Program Files (x86)\Common Files\NewTech Infosystems\Scheduler\Schdlr32.exe" -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Act.Outlook.Service] "C:\Program Files (x86)\ACT\Act for Windows\Act.Outlook.Service.exe"
O4 - HKLM\..\Run: [Act! Preloader] "C:\Program Files (x86)\ACT\Act for Windows\ActSage.exe" -preload
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - C:\Program Files (x86)\WordPerfect Office X3\Programs\WPLauncher.hta
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~2\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~2\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Attach Web page to ACT! contact - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Attach Web page to ACT! contact... - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O15 - Trusted Zone: http://www.hzbent.com
O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager_dev/p...IEGetPlugin.ocx
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\..\{8B1AFE79-691F-4E65-B653-24A9819B33E5}: NameServer = 24.29.103.10,24.29.103.11
O18 - Protocol: intu-help-qb1 - {9B0F96C7-2E4B-433E-ABF3-043BA1B54AE3} - C:\Program Files (x86)\Intuit\QuickBooks 2008\HelpAsyncPluggableProtocol.dll
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1.0\r3hook.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ACT! Scheduler - Sage Software, Inc. - C:\Program Files (x86)\ACT\Act for Windows\Act.Scheduler.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Pervasive.SQL Workgroup Engine - Unknown owner - C:\Windows\SysWOW64\srvany.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
 
--
End of file - 10791 bytes

**OldBloke** · 09-25-2008

You could try feeding your HijackThis logfile into the online analyzer at
HijackThis Logfileauswertung

It will mark many items as known to be innocent, some as unknown therefore potentially suspicious and some as known nasties. Then you can Google about the unknown ones. It can save you lots of time investigating items in the logfile.

Freezes which always happen on a particular event, such as always when you start ProgramX or perform a particular function are most likely to be caused by software corruption. Random freezes are likely to be caused by hardware faults such as bad ram.

I suggest you download memtest86+ from here
Memtest86+ - Advanced Memory Diagnostic Tool
It's an iso image file which you burn to make a bootable CD. If you don't have a CD burner such as Nero, this is a good free one:
The Official ImgBurn Website

Boot the memtest CD and run it for a few hours. If it reports an error, try testing the ram sticks one at a time to find the culprit. Even one error reported is not acceptable if you want the random freezes to stop.

Apart from faulty ram chips, you could get memtest errors just from too much overclocking, so you could try setting BIOS defaults for timings.

**glatzfront** · 09-26-2008

Run a full check disk and defrag.

If the problem still persists use the system configuration utility for a selective startup, help for this is available within the utility.

**jay817** · 09-26-2008

that log seems to show some bad items and missing items

**acdcfan** · 09-26-2008

Quote: Originally Posted by jay817

that log seems to show some bad items and missing items

+ there are couple of entries that need fixing.

**sbarak** · 09-26-2008

Thanks for the replies.

I will try the memtests, the checkdisk and the defrag.

BIOS is at default, no over clocking is done.

What are the bad items?

What are the missing items and how do I fix/get those?

What are the items that need fixing and how?

09-25-2008	#2 (permalink)
OldBloke Vista Home Premium x64 SP1 150 posts	Re: Vista Business x64 SP1 keeps locking up, PC Freezing You could try feeding your HijackThis logfile into the online analyzer at HijackThis Logfileauswertung It will mark many items as known to be innocent, some as unknown therefore potentially suspicious and some as known nasties. Then you can Google about the unknown ones. It can save you lots of time investigating items in the logfile. Freezes which always happen on a particular event, such as always when you start ProgramX or perform a particular function are most likely to be caused by software corruption. Random freezes are likely to be caused by hardware faults such as bad ram. I suggest you download memtest86+ from here Memtest86+ - Advanced Memory Diagnostic Tool It's an iso image file which you burn to make a bootable CD. If you don't have a CD burner such as Nero, this is a good free one: The Official ImgBurn Website Boot the memtest CD and run it for a few hours. If it reports an error, try testing the ram sticks one at a time to find the culprit. Even one error reported is not acceptable if you want the random freezes to stop. Apart from faulty ram chips, you could get memtest errors just from too much overclocking, so you could try setting BIOS defaults for timings.
My System Specs

09-26-2008	#3 (permalink)
glatzfront Premium32 Ultimate32 Pro 92 posts	Re: Vista Business x64 SP1 keeps locking up, PC Freezing Run a full check disk and defrag. If the problem still persists use the system configuration utility for a selective startup, help for this is available within the utility.
My System Specs

09-26-2008	#4 (permalink)
jay817 vista home premium 32bit 56 posts	Re: Vista Business x64 SP1 keeps locking up, PC Freezing that log seems to show some bad items and missing items
My System Specs

09-26-2008	#5 (permalink)
acdcfan Ultimate 64 SP1 248 posts	Re: Vista Business x64 SP1 keeps locking up, PC Freezing Quote: Originally Posted by jay817 that log seems to show some bad items and missing items + there are couple of entries that need fixing.
My System Specs

09-26-2008	#6 (permalink)
sbarak Vistax64 Business 5 posts	Re: Vista Business x64 SP1 keeps locking up, PC Freezing Thanks for the replies. I will try the memtests, the checkdisk and the defrag. BIOS is at default, no over clocking is done. What are the bad items? What are the missing items and how do I fix/get those? What are the items that need fixing and how?
My System Specs

Similar Threads
Thread	Forum
Computer keeps locking, freezing, etc	General Discussion
SOLUTION: Windows Vista Very Slow.. Locking Up.. Freezing	Vista mail
Vista Keeps Freezing and locking down on me.	Vista General
Guess what - freezing/locking up!	Vista General
Vista Remote Desktop locking / freezing	Vista networking & sharing