Windows Explorer Hangs
Running Windows XP, SP3, fully updated as of a week ago. Occasionally, when trying to open files from Windows Explorer, the Explorer window will hang and become unresponsive. I have to use Task Manager to kill it, then my task bar seems to rebuild, and the machine seems to run okay (except I still can't open any files from Explorer). This happens almost every time.
If I open the associated program, the file opens as expected - for example, if I want to open a Word document, I can open Word, and then locate the document and open it. If, however, I locate the document and attempt to launch it by either double-clicking or using the right-click menu, Windows Explorer will hang almost every time.
What causes this, and what can I do to fix it?
If I open the associated program, the file opens as expected - for example, if I want to open a Word document, I can open Word, and then locate the document and open it. If, however, I locate the document and attempt to launch it by either double-clicking or using the right-click menu, Windows Explorer will hang almost every time.
What causes this, and what can I do to fix it?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I run ESET Antivirus daily, and WebRoot Spy Sweeper. I'm pretty sure it's not malware or virus, but I'll run a scan just to be sure. I did run CCleaner's registry repair, and fixed the items it found (about 3 dozen items or so).
This didn't seem to happen after installing anything specific. It's been occuring for some time, and it comes and goes. I've never installed any digital camera software to this machine.
I use The Ultimate Troubleshooter, and have my startup trimmed to the bare necessities. I'll try AutoRuns, however, and see if it finds anything.
This occurs whether I right-click or double-click.
This didn't seem to happen after installing anything specific. It's been occuring for some time, and it comes and goes. I've never installed any digital camera software to this machine.
I use The Ultimate Troubleshooter, and have my startup trimmed to the bare necessities. I'll try AutoRuns, however, and see if it finds anything.
This occurs whether I right-click or double-click.
Have you checked your event log?
Try some of the suggestions here:
http://ss64.com/nt/slow_browsing.html
http://support.microsoft.com/default.aspx?scid=kb;en-us;819017
http://support.microsoft.com/kb/972685
http://ss64.com/nt/slow_browsing.html
http://support.microsoft.com/default.aspx?scid=kb;en-us;819017
http://support.microsoft.com/kb/972685
Assuming you have the OS install disk, insert it, go to run and type sfc /scannow. This will scan the machine for any missing Windows files and replace them.
You said you scan your machine on a regular basis, it doesn't hurt to use some different utilities once in a while.
Two you will see on EE a lot are malwarebyte already sugested by davorin
Also try combofix, read the tutorial first and follow all the directions. Post your findings here.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
You said you scan your machine on a regular basis, it doesn't hurt to use some different utilities once in a while.
Two you will see on EE a lot are malwarebyte already sugested by davorin
Also try combofix, read the tutorial first and follow all the directions. Post your findings here.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
addition to the above post: pay attention when running sfc /scannow: if you installed a service pack that was not included on the installation medium onto your windows installation, the scan may ask you to overwrite files by a previous version of them, so use this scan/repair operation with care!
Do you get some errors in event viewer at that time?
Process explorer could help you to get in right direction:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Process explorer could help you to get in right direction:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Boot into SAFEMODE & see if problem existst there. If no problems, anti-virus may be the culprit.
Thanks for your suggestions ... I'm working through them and will post back as soon as I can.
By the way, if I reboot, the problem normally goes away for a bit, but will come back over time. Sometimes, it comes back immediately, other times it may take a few days. Right now, the issue isn't happening so I'm having to wait.
Ok, hope you have been helped
Okay ... my problem still remains. I've done the following:
Scanned for virus using ESET, scanned for malware using Spyware Doctor and Malware Bytes. Both returned nothing. Note I also use ESET and Spyware Doctor in "active" mode, and have had no issues come up.
I did change to ESET antivirus from F-Prot, but that was several months back. The problem has started since that time, but did not start up immediately after installing ESET. I did completely remove F-Prot before installing ESET. Also, while I have both Spyware Docotor and Malware Bytes, I only have SD configured to run in "real time". Malware Bytes does not start or do anything until I launch it.
There's nothing in my event logs that strike me as odd, other than an error about my Report Server (but that's another matter).
Sometimes, when I try to End Task in Task Manager, I get an error stating "This program cannot be closed because it is locked by the system". In those cases, I have no recourse but to reboot and hope for the best.
AutoRuns shows a LOT of information, so I'm not 100% sure what I should be looking for. I did review the Explorer tab, specifically the Context Menu Handlers section, and don't see anything there that strikes me as odd. Is there anything else I should be looking for?
I did boot into Safe mode, but the behavior did not recur. However, as I said earlier, sometime this takes several hours or days to happen - it's not immediate.
As it stands now, I've just tried right-clicking again, and my machine is now completely hung, and I'm getting the error I indicated above. I've got to re-boot, so I'm sure the issue will go away.
Is there anything else anyone can come up with? I'm at a loss, and am rapidly coming to the conclusion that it may be time for an OS re-install, which I had really, really hoped to avoid.
Scanned for virus using ESET, scanned for malware using Spyware Doctor and Malware Bytes. Both returned nothing. Note I also use ESET and Spyware Doctor in "active" mode, and have had no issues come up.
I did change to ESET antivirus from F-Prot, but that was several months back. The problem has started since that time, but did not start up immediately after installing ESET. I did completely remove F-Prot before installing ESET. Also, while I have both Spyware Docotor and Malware Bytes, I only have SD configured to run in "real time". Malware Bytes does not start or do anything until I launch it.
There's nothing in my event logs that strike me as odd, other than an error about my Report Server (but that's another matter).
Sometimes, when I try to End Task in Task Manager, I get an error stating "This program cannot be closed because it is locked by the system". In those cases, I have no recourse but to reboot and hope for the best.
AutoRuns shows a LOT of information, so I'm not 100% sure what I should be looking for. I did review the Explorer tab, specifically the Context Menu Handlers section, and don't see anything there that strikes me as odd. Is there anything else I should be looking for?
I did boot into Safe mode, but the behavior did not recur. However, as I said earlier, sometime this takes several hours or days to happen - it's not immediate.
As it stands now, I've just tried right-clicking again, and my machine is now completely hung, and I'm getting the error I indicated above. I've got to re-boot, so I'm sure the issue will go away.
Is there anything else anyone can come up with? I'm at a loss, and am rapidly coming to the conclusion that it may be time for an OS re-install, which I had really, really hoped to avoid.
As an update: I've uninstalled a few things, at least one of which added items to the right-click menu, and have rebooted. I'll see what that does ...
You have tried to right click in safe mode, when the hung occured?
If you can post hijackthis log? We will see what programs are starting with your computer and will be able to help you cleanup unnecessary entries.
By uninstalling programs which added right click context menu you could be on right path. I remember that an old version of trendmirco client/server antivirus caused similar problem, when the clients had enabled right click context menu. Luckly I could remove the menu option in configuration.
If you can post hijackthis log? We will see what programs are starting with your computer and will be able to help you cleanup unnecessary entries.
By uninstalling programs which added right click context menu you could be on right path. I remember that an old version of trendmirco client/server antivirus caused similar problem, when the clients had enabled right click context menu. Luckly I could remove the menu option in configuration.
Here's the log - I just ran HiJack this
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:08:41 AM, on 1/3/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
G:\Program Files\Symantec\pcAnywhere\awhost32.exe
G:\Program Files\Bonjour\mDNSResponder.exe
G:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
G:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
G:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
G:\WINDOWS\system32\inetsrv\inetinfo.exe
G:\WINDOWS\System32\nvsvc32.exe
G:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
G:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\vmnat.exe
G:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
G:\WINDOWS\system32\SearchIndexer.exe
G:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
G:\Program Files\VMware\VMware Workstation\vmware-authd.exe
G:\WINDOWS\system32\vmnetdhcp.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\system32\RUNDLL32.EXE
G:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe
G:\Program Files\Unlocker\UnlockerAssistant.exe
G:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe
G:\Program Files\VMware\VMware Workstation\vmware-tray.exe
G:\Program Files\Microsoft Office\Office2007\Office12\GrooveMonitor.exe
G:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
G:\Program Files\Common Files\Real\Update_OB\realsched.exe
G:\Program Files\Microsoft IntelliPoint\ipoint.exe
G:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
G:\WINDOWS\system32\ctfmon.exe
G:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
G:\Program Files\Microsoft ActiveSync\Wcescomm.exe
G:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\FreeWheel\FreeWheel.exe
G:\PROGRA~1\MICROS~3\rapimgr.exe
G:\Program Files\PayPal Payment Request Wizard\Outlook Wizard\OEHook.exe
G:\Program Files\TechSmith\Snagit 9\Snagit32.exe
G:\WINDOWS\system32\wuauclt.exe
G:\Program Files\Red Gate\SQL Prompt 3\RedGate.SQLPrompt.TrayApp.exe
G:\Program Files\Windows Desktop Search\WindowsSearch.exe
G:\Program Files\WinZip\WZQKPICK.EXE
G:\Program Files\Microsoft Office\Office2007\Office12\ONENOTEM.EXE
G:\Program Files\TechSmith\Snagit 9\TSCHelp.exe
G:\Program Files\TechSmith\Snagit 9\SnagPriv.exe
G:\Program Files\TechSmith\Snagit 9\snagiteditor.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Mozilla Firefox\firefox.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Trend Micro\HijackThis\HijackThis.exe
G:\WINDOWS\system32\SearchProtocolHost.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - G:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - G:\Program Files\rpbrowserrecordplugin.dll
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - G:\Program Files\Ipswitch\WS_FTP Professional\wsbho2k0.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - G:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office2007\Office12\GrooveShellExtensions.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - G:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" G:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" G:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] "G:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "G:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [MaxMenuMgr] "G:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [vmware-tray] "G:\Program Files\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "G:\Program Files\Microsoft Office\Office2007\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [egui] "G:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] "%systemroot%\system32\dumprep" 0 -k
O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IntelliPoint] "g:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SpySweeper] "G:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [ctfmon.exe] "G:\WINDOWS\system32\ctfmon.exe"
O4 - HKCU\..\Run: [RoboForm] "G:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "G:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "G:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = G:\Program Files\Microsoft Office\Office2007\Office12\ONENOTEM.EXE
O4 - Global Startup: FreeWheel.lnk = C:\Program Files\FreeWheel\FreeWheel.exe
O4 - Global Startup: Microsoft Office.lnk = G:\Program Files\Microsoft Office\Office10\Office10\OSA.EXE
O4 - Global Startup: Outlook Plugin.lnk = G:\Program Files\PayPal Payment Request Wizard\Outlook Wizard\OEHook.exe
O4 - Global Startup: Snagit 9.lnk = G:\Program Files\TechSmith\Snagit 9\Snagit32.exe
O4 - Global Startup: SQL Prompt Query Analyzer Integration.lnk = G:\Program Files\Red Gate\SQL Prompt 3\RedGate.SQLPrompt.TrayApp.exe
O4 - Global Startup: Windows Search.lnk = G:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = G:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &ieSpell Options - res://G:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://G:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Customize Menu - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office10\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Lookup on Merriam Webster - file://G:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://G:\Program Files\ieSpell\wikipedia.HTM
O8 - Extra context menu item: RoboForm Toolbar - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Business Objects\JRE\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Business Objects\JRE\bin\npjpi142_04.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - G:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - G:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - G:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - G:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\OFFICE~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\OFFICE~1\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - G:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - G:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - G:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://G:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\OFFICE~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: g:\program files\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: g:\program files\vmware\vmware workstation\vsocklib.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1235688047515
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1235703497250
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - G:\Program Files\Microsoft Office\Office2007\Office12\GrooveSystemServices.dll
O18 - Protocol: intu-help-qb1 - {9B0F96C7-2E4B-433E-ABF3-043BA1B54AE3} - G:\Program Files\Intuit\QuickBooks 2008\HelpAsyncPluggableProtocol.dll
O18 - Protocol: intu-help-qb2 - {84D77A00-41B5-4B8B-8ADF-86486D72E749} - G:\Program Files\Intuit\QuickBooks 2008\HelpAsyncPluggableProtocol.dll
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Symantec pcAnywhere Host Service (awhost32) - Symantec Corporation - G:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Bonjour Service - Apple Inc. - G:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - G:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - G:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - G:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Seagate Service (FreeAgentGoNext Service) - Seagate Technology LLC - G:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
O23 - Service: iPod Service - Apple Inc. - G:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - G:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - G:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - G:\WINDOWS\system32\drivers\pclepci.sys
O23 - Service: QBCFMonitorService - Intuit - G:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - G:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: QuickBooksDB19 - Intuit, Inc. - G:\PROGRA~1\Intuit\QUICKB~1\QBDBMgrN.exe
O23 - Service: SMServer - SMServer - G:\WINDOWS\system32\snmvtsvc.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - G:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - G:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - G:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - G:\WINDOWS\system32\vmnat.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - G:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - G:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - G:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
--
End of file - 15283 bytes
"AutoRuns shows a LOT of information, so I'm not 100% sure what I should be looking for."
You might look for any component loaded (or trying to load - you'll see 'file not found') referring to your old F-Prot installation. More generally, take a good look at all entries with 'file not found': deleting these (in autoruns) can seriously speed up, I experienced it myself.
You might look for any component loaded (or trying to load - you'll see 'file not found') referring to your old F-Prot installation. More generally, take a good look at all entries with 'file not found': deleting these (in autoruns) can seriously speed up, I experienced it myself.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Thanks. I've eliminated some of the startup items:
Groove
AppleMobileDevice
RealSchd
UnlockerAssistant
Reader_sl
YahooAUService
I'll run this for a bit and see what happens.
Groove
AppleMobileDevice
RealSchd
UnlockerAssistant
Reader_sl
YahooAUService
I'll run this for a bit and see what happens.
It just gets stranger and stranger ...
After eliminating the startup items above, and removing some older programs I no longer use (like Clipmate), it seemed as if the issue was resolved. I had no issues yesterday at all.
However, today, after rebooting, I checked again. All was good, until I fired up Quickbooks Premier Contractor Edition 2009. As soon as I did this, I began to get the behavior again. I shut down Quickbooks and my Windows Explorer right-click again started working.
I'm going to work with this for a day or two and see if I can nail down exactly when this happens. I've just downloaded and installed a QB update, so we'll see if that resolves this issue.
After eliminating the startup items above, and removing some older programs I no longer use (like Clipmate), it seemed as if the issue was resolved. I had no issues yesterday at all.
However, today, after rebooting, I checked again. All was good, until I fired up Quickbooks Premier Contractor Edition 2009. As soon as I did this, I began to get the behavior again. I shut down Quickbooks and my Windows Explorer right-click again started working.
I'm going to work with this for a day or two and see if I can nail down exactly when this happens. I've just downloaded and installed a QB update, so we'll see if that resolves this issue.
Bizarre indeed, it seems indeed you've found the culprit. Keep us informed if it was that program or not ...
It seems that my comment could be right.
I quote myself: "LSMConsulting, this could come from a third-party software that you have installed"
I quote myself: "LSMConsulting, this could come from a third-party software that you have installed"
I may have jumped the gun on that one ... I've had QuickBooks running for several hours, and the behavior has not restarted.
Seems that QB isn't the problem, and I'm not sure what is. At this point, the machine has been running without re-boot for about 2 days, and the right-click is working (although sometimes it's very slow to produce the menu). I've done exactly the same things I do each day on the machine - run my business, work here in EE in variour roles, etc etc - and at this point it seems to be working.
I'm going to leave this open for another few days to see if the right-click will stop working again so I can gather more info.
I'm going to leave this open for another few days to see if the right-click will stop working again so I can gather more info.
Could you upload autoruns file here.
In Autoruns:
Hit options and check "verify code signatures" and rescan (F5 key)
Don't make any other changes...
Within Autoruns,select the file tab and select save(Ctrl+S) and save as AutoRuns Data (*.arn) -Output file is a few megs in size
Once saved then right click autoruns.arn and rename to autoruns.txt to upload
In Autoruns:
Hit options and check "verify code signatures" and rescan (F5 key)
Don't make any other changes...
Within Autoruns,select the file tab and select save(Ctrl+S) and save as AutoRuns Data (*.arn) -Output file is a few megs in size
Once saved then right click autoruns.arn and rename to autoruns.txt to upload
Thank you all for sticking with this. I really do appreciate it.
I've zipped and uploaded the file. I changed the extension to .txt from .arn.
01072009-AutoRuns.zip
I've zipped and uploaded the file. I changed the extension to .txt from .arn.
01072009-AutoRuns.zip
Thanks for that.
Firstly get the latest Eset smart security version and install it.
See how things go after that.
If still issue we can then try something else
http://download.eset.com/download/win/ess/ess_nt32_enu.msi
Firstly get the latest Eset smart security version and install it.
See how things go after that.
If still issue we can then try something else
http://download.eset.com/download/win/ess/ess_nt32_enu.msi
I'm running Eset Antivirus version 4.0.437.0, with a virus database updated daily (the last update was today, at about 2 am EST).
Is there a newer version available?
Is there a newer version available?
Newer program version: 4.0.474
Sorry, here's the correct link for Eset AV
http://download.eset.com/download/win/eav/eav_nt32_enu.msi
Sorry, here's the correct link for Eset AV
http://download.eset.com/download/win/eav/eav_nt32_enu.msi
Thanks for the link. I downloaded and installed the new version.
I've been running the newest ESET version for a few days, and the problem is still occurring.
On a lark, I tried to invoke the right-click menu, then left the machine for several hours. It never responded (i.e. showed the right-click menu), and I also noticed that my TaskBar was locked when I came back, and had not been updated. I tried the right-click at 6:33, and when I returned about 9:00, my taskbar clock was still showing 6:33 - it had not updated. I couldn't right click on the clock or other taskbar items.
Any other suggestions?
And again - thank you all for staying with this. I know how difficult troubleshooting things like this can be, and I sincerely appreciate all the help so far.
On a lark, I tried to invoke the right-click menu, then left the machine for several hours. It never responded (i.e. showed the right-click menu), and I also noticed that my TaskBar was locked when I came back, and had not been updated. I tried the right-click at 6:33, and when I returned about 9:00, my taskbar clock was still showing 6:33 - it had not updated. I couldn't right click on the clock or other taskbar items.
Any other suggestions?
And again - thank you all for staying with this. I know how difficult troubleshooting things like this can be, and I sincerely appreciate all the help so far.
Just to clarify:
You right clicked the desktop backround for this to happen, or a folder or file?
You right clicked the desktop backround for this to happen, or a folder or file?
I opened Windows Explorer, then selected a file (a .png image file, but the filetype makes no difference) and right-clicked on it. The right-click menu never appeared, and machine hung as I described earlier.
1-Firstly create a System Restore point and remember what you call it.
2-Open Autoruns,let it complete scanning and select Explorer tab
Scroll to:
HKLM\Software\Classes\Fold
Uncheck the boxes in this section.
Eight in total from:
CopyToCd to Groove GFS Context Menu Handler XXX
Do not Delete them!
Test again :)
2-Open Autoruns,let it complete scanning and select Explorer tab
Scroll to:
HKLM\Software\Classes\Fold
Uncheck the boxes in this section.
Eight in total from:
CopyToCd to Groove GFS Context Menu Handler XXX
Do not Delete them!
Test again :)
I did this: unchecked the 8 items in the section that you indicated. There was no change - the machine still hung.
I have rebooted, as the right-click attempt locked up everything.
I have rebooted, as the right-click attempt locked up everything.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Sorry, just got around to doing this. I've uninstalled WebRoot and activated MalWare Bytes instead. I'll test this configuration and see what gives.
As a side note, removing WebRoot seems to have speeded up my machine a good bit. I was always concerned that it was sort of "heavy"; hopefully Malware Bytes will be a better fit.
Mbam is a better product(my opinion), and not a resource hog!
I run Mbam on my wife's laptop. I've been meaning to switch over anyway, as my WebRoot subscription runs out in a few months, so I just went ahead and bought a couple of new MBbam licenses for my machines.
Update: So far, removing WebRoot and using Malware Bytes seems to be working. I'm able to use right-click. Previously, within 24 hours I would have had issues but so far, so good. Hopefully this will resolve this issue.
Fingers crossed!
I've been running for nearly 48 hours with no recurrence of the right-click issue. This seems to have been fixed by uninstalling WebRoot Spy Sweeper (I'm now using MalwareBytes www.malwarebytes.org). Webroot seemed to work okay, but had definitely become a problem. Took forever to load, and the database update time was really poor.
At this point I'd consider this to be resolved.
Thanks to everyone for staying involved with this. I really do appreciate it.
At this point I'd consider this to be resolved.
Thanks to everyone for staying involved with this. I really do appreciate it.
No prob!
Glad you have sloved the problem.
http://www.malwarebytes.org/mbam.php
http://housecall.trendmicro.com/
http://free.antivirus.com/rootkit-buster/
Maybe you can post hijackthis log:
http://free.antivirus.com/hijackthis/
It the problem begined no too far ago you can try to use system restore to restore the comupter to date begore the problems begun:
http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx
Other option is to try repair install:
http://support.microsoft.com/kb/315341
or
http://michaelstevenstech.com/XPrepairinstall.htm