-
June 28th, 2002, 07:45 PM
#1
Memory Resourses Low
I am running a 1ghz AMD with 512mb RAM. I have a program called FreeRAM XP lite which recovers my resourses when they run low. Problem is that they run low within a matter of minutes after recovering them. I am only running NAV, SYSTRAY, Explorer, and a Sygate personal firewall. (plus what else normally loads up with ME, like task mgr and the likes). Any ideas why I lose my resourses so fast? When I lose resourses, things like the Media player freezes or stutters. I have been getting more BSOD lately than usual. Had a couple of viruses but removed them per instructions fron NAV. I am puzzled. Should doing a clean format/reinstall be an option?
-
June 28th, 2002, 07:54 PM
#2
Recent and updated virus scan?
If not....Maybe start with one of the free online virus scanners then?
Grisoft
Housecall
Panda
Symantec
And for Trojans.....might I suggest:
Tauscan
Checked for Spyware ?
Perhaps go into msconfig, and under the start up tab, uncheck any unneccessary things from running at start up.
(start...run...type in: msconfig click ok...and check under the start up tab)
Here are two links to tell you what those items are:
Msconfig entries
and
More of the same
Daizy
Hope this helps.
-
June 28th, 2002, 08:00 PM
#3
Daizy,
yes updated virus definitions with NAV 2002, scanned results Virus free. Ad ware ran and found nothing out of the ordinary. Ran msconfig and already closed out everything nonessential. Done everything I can think of to remedy low resourses. Still stumped!!!
-
June 28th, 2002, 08:08 PM
#4
Download and run StartupLog
It creates a Startup.log file on your desktop. Copy/Paste the contents back here so we can review them.
BTW the Ram Freeing program is doing absolutely nothing with System Resources. It is forcing windows to create free memory. This is counter productive. Memory is there to be used. Let windows use it, and get rid of that app.
Also, after a fresh boot, what is your System Resource Percentage?
My Computer > Right Mouse > Properties > Performance
-
June 28th, 2002, 08:24 PM
#5
Here is the copy/paste from startup log!
****************************************************
---------- C:\WINDOWS\desktop\StartUp.Log
Start-Ups checked at 06-28-2002 5:25:47.15p
__________________________________________________________________________
__________________________________________________________________________
StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________________________________
__________________________________________________________________________
Comments:
This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.
StartUp Log (version 1.56) - Release Date 3/11/2002
__________________________________________________________________________
__________________________________________________________________________
StartUp Log Index
1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations
__________________________________________________________________________
__________________________________________________________________________
The following is a list of your current Start-Ups
__________________________________________________________________________
__________________________________________________________________________
1. HKLM Run - Registry
[RegPath]
"StartUp"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SystemTray"="SysTray.Exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"TkBellExe"="C:\\Program Files\\Common Files\\Real\\Update_OB\\evntsvc.exe -osboot"
"SmcService"="C:\\PROGRA~1\\SYGATE\\SPF\\SMC.EXE -startgui"
"NAV Agent"="C:\\PROGRA~1\\NORTON~1\\NORTON~1\\NAVAPW32.EXE"
"NPROTECT"="C:\\Program Files\\Norton SystemWorks\\Norton Utilities\\NPROTECT.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
==========================================================================
__________________________________________________________________________
2. HKCU Run - Registry
[RegPath]
"StartUp"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
==========================================================================
__________________________________________________________________________
3. HKLM RunOnce - Registry
[RegPath]
"StartUp"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
==========================================================================
__________________________________________________________________________
4. HKCU RunOnce - Registry
[RegPath]
"StartUp"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
==========================================================================
__________________________________________________________________________
5. HKLM RunServices - Registry
[RegPath]
"StartUp"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"SchedulingAgent"="mstask.exe"
"SmcService"="C:\\PROGRAM FILES\\SYGATE\\SPF\\SMC.EXE"
"ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"
"CSINJECT.EXE"="C:\\Program Files\\Norton SystemWorks\\Norton CleanSweep\\CSINJECT.EXE"
"NPROTECT"="C:\\Program Files\\Norton SystemWorks\\Norton Utilities\\NPROTECT.EXE"
"SymTray - Norton SystemWorks"="C:\\Program Files\\Common Files\\Symantec Shared\\SymTray.exe \"Norton SystemWorks\""
==========================================================================
__________________________________________________________________________
6. HKLM RunServicesOnce - Registry
[RegPath]
"StartUp"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]
==========================================================================
__________________________________________________________________________
7. WIN.INI File - (c:\windows\win.ini)
Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.
These are the run and load lines in your WIN.INI file
run=
load=
==========================================================================
__________________________________________________________________________
8. SYSTEM.INI File - (c:\windows\system.ini)
Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.
This is the shell line in your SYSTEM.INI file
shell=Explorer.exe
==========================================================================
__________________________________________________________________________
9. AUTOEXEC.BAT File - (c:\autoexec.bat)
(Some trojans have been known to start from this file)
These are your program startups and set paths in your autoexec.bat file
==========================================================================
__________________________________________________________________________
10. StartUp Folder - (c:\windows\start menu\programs\startup)
Shortcuts to any program will automatically start when placed here.
These are the shortcuts located in your StartUp folder
*(No start-ups found)*
==========================================================================
__________________________________________________________________________
11. All Users Folder - (c:\windows\all users\start menu\programs\startup)
Shortcuts to any program will automatically start when placed here.
These are the shortcuts located in your All Users StartUp folder
*(No start-ups found)*
==========================================================================
__________________________________________________________________________
12. Miscellaneous StartUp Configurations
-============================-
Registry StartUp Directories
-============================-
Should show the Start Menu StartUp and All Users StartUp directories
.....................................................................
[1] HKCU - Shell Folders
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"
.....................................................................
[2] HKCU - User Shell Folders
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
.....................................................................
[3] HKLM - Shell Folders
HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders
"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"
.....................................................................
[4] HKLM - User Shell Folders
HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders
.....................................................................
-=======================-
Registry Shell Spawning
-=======================-
Open Commands for Executable File Types
@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)
@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)
@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)
@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)
@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)
@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)
-=========================-
HKLM RunOnceEx - Registry
-=========================-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]
-=========================-
HKU (.Default) Run - Registry
-=========================-
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]
-==============================-
HKU (.Default) RunOnce - Registry
-==============================-
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]
-================================-
StubPaths - Registry (Partial Listing)
-================================-
(Please see the StubPath.txt on your desktop for complete listing)
HKLM\Software\Microsoft\Active Setup\Installed Components
"StubPath"="C:\\WINDOWS\\msnmgsr1.exe"
"StubPath"="C:\\WINDOWS\\COMMAND\\sulfnbk.exe /L"
"StubPath"=""
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\ie4uinit.exe"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"
-=================-
WINSTART.BAT File - (c:\windows\winstart.bat)
-=================-
@C:\WINDOWS\tmpcpyis.bat
-=================-
DOSSTART.BAT File - (c:\windows\dosstart.bat)
-=================-
@echo off
REM Notes:
REM DOSSTART.BAT is run whenenver you choose "Restart the computer
REM in MS-DOS mode" from the Shutdown menu in Windows. It allows
REM you to load programs that you might not want loaded in Windows,
REM (because they have functional equivalents) but that you do
REM want loaded under MS-DOS. The two primary candidates for
REM this are MSCDEX and a real mode driver for the mouse you ship
REM with your system. Commands that you want present in both Windows
REM and MS-DOS should be placed in the Autoexec.bat in the
REM \Image directory of your reference server. Please note that for
REM MSCDEX you will need to load the corresponding real-mode CD
REM driver in Config.sys. This driver won't be used by Windows 98
REM but will be available prior to and after Windows 98 exits.
REM
REM This file is also helpful if you want to F8 boot into MS-DOS 7.0
REM before Windows loads and access the CD-ROM. All you have to do
REM is press F8 and then run DOSSTART to load MSCDEX and your real
REM mode mouse driver (no need to remember the command line parameters
REM for these two files.
REM
REM - You MUST explicitly specify the CD ROM Drive Letter for MSCDEX.
REM - The string following the /D: statement must explicitly match
REM the string in CONFIG.SYS following your CD-ROM device driver.
REM MSCDEX.EXE /D:OEMCD001 /l:d
REM MOUSE.EXE
-=================-
WININIT.BAK File - (c:\windows\wininit.bak)
(name) (type) (size)(modified)(time)
wininit bak 105 06-26-02 11:55p
-=================-
[Rename]
NUL=C:\PROGRA~1\NORTON~1\NORTON~1\CUSTACT.EXE
NUL=C:\PROGRA~1\NORTON~1\NORTON~1\UNREGCMD.EXE
-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-
==========================================================================
__________________________________________________________________________
- Supplemental Environment Information -
COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\PROGRA~1\COMMON~1\MICROS~1\MSInfo\;;C:\WINDOWS;C:\WINDOWS\COMMAND
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
winbootdir=C:\WINDOWS
windir=C:\WINDOWS
File - c:\windows\Wininit.bak
File - c:\windows\deletefi.ini
==========================================================================
__________________________________________________________________________
- End -
-
June 28th, 2002, 08:27 PM
#6
Forgot!!!!
My resourses are between 85-94% usually!!! From boot!!!
-
June 28th, 2002, 10:04 PM
#7
I don't see anything out of the ordinary in the log. (I DO have to remember that files can be attached to responses now!).
You say you did have viruses. Which ones?
Also, you get blue screens. If they are "regular", note the error and post it here.
As for the low resources, are you getting "Out of System Resources" errors? Or "Low on Memory" errors?
If the former, you can run RSRCMTR and try to note what you are doing as the resources are dwindling.
And, one task you can remove from startups is CleanSweep. The way I run it, is to Enable it prior to and install, and then disable it afterwards. In this way, it doesn't have to always to active. (I have not seen any evidence anywhere that this is contributing to your problem though).
Lastly, how long have you had 512MBs installed? And were you experiencing these errors before?
-
June 28th, 2002, 11:46 PM
#8
WhitPhil,
The viruses I had were the W32.Klez and the W32.Hybris.
The Hybris was a few months ago and the Klez was just last week. I removed both of them utilizing Symantec's Instructions and removal tools. My computer scans clean.
The error messages I get are "System Low On Resourses, Try closing some programs .................Etc" Then when i try to close out the program I'm in I get BSOD messages. Some times I can work around them other times I have to reboot. Also I get a lot of errors ie: such & such a program.... has caused a fault in kernel32 and will now shut down" type messages.
CleanSweep has been disabled. I am only running NAV with Auto-Protect enabled.
As far as the memory goes, it's two 256mb sdram that I purchaced from Crutial last November. I never really experienced any low resources until recently.
Another "glitch" that I have noticed lately is my screen "flashes" when I am on certain pages online at times. This is also a new problem.
-
June 29th, 2002, 02:18 AM
#9
Originally posted by WhitPhil
Also, you get blue screens. If they are "regular", note the error and post it here.
[/B]
WhitPhil,
Here is a great example of what happens as it just happened again.
I was using a program called "List-FC", got it from "Reticulated Toys-rmbox" the site you told me about with the startuplog. I was using it in conjunction with Corel Wordperfect9 to print out lists of my MP3 folders. So i'm running List-FC, WP9, My printer, NAV, and explorer.
Everything is going ok for a while when I get a BSOD with "ERROR: OE: 0197: BFF8E64B" and says hit any key to continue.
When I do I get another Error message "WPWIN9 caused a General Protection Fault in Module GDI.EXE at 000c:00000baf." Close is the only option I have.
When I close I get another error message "Explorer An error has occured in your program. To keep working click Ignore & save your work to a new file. To quit this program click close. you will lose info you entered since your last save". Ignore will not respond and close gives me another BSOD, same as above.
When I press any key to continue I got another error message "Explorer caused a General Fault Protection in Module GDI.EXE at 0005:00002a52" Again close is the only option given.
When I clicked close this time the computer froze up and would not respond to anything except CTRL+ALT+DEL where I had to "shut down" and "reboot.
This is typical of the errors I get.
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|