Hi.
Almost everytime I'm trying to open Windows Explorer, i.e. My Documents or
whatever folder, Windows freezes and I have to Log Off/Restart through
Windows Task Manager (Ctrl+Alt+Del).
I'm running updated Windows XP SP2, updated antivirus ESET, Security Center
firewall. I'm experiencing the problem for 2 months now.
Any help will be much appreciated

Any clues in Event Viewer?

---
Leonard Grey
Errare humanum est

Autoplay Handlers wrote:

Actually I haven't investigate that much the problem. After the OS freezes I
can't do anything else than restart. Also I don't understand everything in
the Event Viewer to say if there are any clues

"Leonard Grey" wrote:

How much RAM memory?

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

You should be able to gather more information from Task Manager. With
the Processes tab open select View, Select, Columns and check the boxes
before Peak Memory Usage and Virtual Memory size. What are the figures
for the 6 processes using the largest amounts?

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~




Autoplay Handlers wrote:

Hi Gerry-

Category: None
Event ID: 1090
Windows couldn't log the RSoP (Resultant Set of Policies) session status. An
attempt to connect to WMI failed. No more RSoP logging will be done for this
application of policy.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The upper event appears dozen of times

The Windows Security Center Service was unable to establish event queries
with WMI to monitor third party AntiVirus and Firewall.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The upper event appears 5 times

The other stuff is Information Type.
I couldn't get <What are the figures
There are no yellow questin marks

Thank you

"Gerry" wrote:

Select Start, Control Panel, Administrative Tools, Services and locate
Windows Management Instrumentation. Check that it has started and that
the Start Up is Automatic. If you double click on Windows Management
Instrumentation it opens and you can change the Start Up type to
Automatic (see scroll option in middle of General tab). Also there is a
Start button if you need to start the service.

The previous paragraph could resolve the Event Viewer errors. It may
resolve the whole problem

Your amount of RAM is most likely insufficient for running Windows XP
with complete satisfaction. The amount is minimal.

Can you please try again for this information.

Try Ctrl+Alt+Delete to select Task Manager and click the PerformanceTab.
Under Commit Charge what is the Total, the Limit and the Peak?

What is your CPU processor speed?

Do you leave your computer on 24/7?

Open Disk Defragmenter and click on Analyse. Select View Report and
click on Save As and Save. Now find VolumeC.txt in your My Documents
Folder and post a copy. Do this before running Disk Defragmenter as it
is more informative.

Select Start, All Programs, Accessories, System Tools, Disk CleanUp to
Empty your Recycle Bin and Remove Temporary Internet Files. Also
select Start, All Programs, accessories, System Tools, Disk CleanUp,
More Options, System Restore and remove all but the latest System
Restore point. Run Disk Defragmenter.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Try Ctrl+Alt+Delete to select Task Manager and click the Performance

The startup of service Windows Management Instrumentation has been set to
Automatic. The Windows Management Instrumentation Driver Extensions services
is set to manual startup.
In Task Manager tab Processes the maximum CPU is used by System Idle Process
- max 88.
Commit Charge (K):
Total: 394520
Limit: 789112
Peak: 394840

I'm not sure about total CPU processor speed - is it the AMD processor
speed? It's 1.20 GHz

Thank you

"Gerry" wrote:

Sorry - I forgot the other info :-)
I do not use the PC 24/7

Here is the copy of VolumeC.txt:
Volume (C
Volume size = 18,64 GB
Cluster size = 4 KB
Used space = 15,42 GB
Free space = 3,22 GB
Percent free space = 17 %

Volume fragmentation
Total fragmentation = 1 %
File fragmentation = 2 %
Free space fragmentation = 0 %

File fragmentation
Total files = 72 070
Average file size = 402 KB
Total fragmented files = 1 663
Total excess fragments = 4 509
Average fragments per file = 1,06

Pagefile fragmentation
Pagefile size = 560 MB
Total fragments = 1

Folder fragmentation
Total folders = 7 258
Fragmented folders = 26
Excess folder fragments = 283

Master File Table (MFT) fragmentation
Total MFT size = 97 MB
MFT record count = 79 572
Percent MFT in use = 80 %
Total MFT fragments = 3

--------------------------------------------------------------------------------
Fragments File Size Most fragmented files
107 7 MB \patch\msxml5.msp
101 15 MB \WINDOWS\Installer\29d833.msp
101 15 MB \WINDOWS\Installer\353afa.msp
101 15 MB \WINDOWS\Installer\48f3ae.msp
55 3 MB \WINDOWS\Installer\3b94e8.msi
49 4 MB \Documents and Settings\account\Local
Settings\Temporary Internet Files\Content.IE5\XR3RLDDK\2044905569[1].flv
47 3 MB \WINDOWS\Installer\MSI2A.tmp
47 196 KB \Documents and Settings\account\Local
Settings\Temporary Internet Files\Content.IE5\VA43LX3O
47 188 KB \Documents and Settings\account\Local
Settings\Temporary Internet Files\Content.IE5\OIZ70U3O
46 184 KB \Documents and Settings\account\Local
Settings\Temporary Internet Files\Content.IE5\ZQ1IEF76
45 188 KB \Documents and Settings\account\Local
Settings\Temporary Internet Files\Content.IE5\XR3RLDDK
43 340 KB \Documents and
Settings\good.PRO-EK1BWF15Q1U.001\Desktop\Zima 2007\Thumbs.db
38 2 MB
\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW7 16\_mscorwks.dll
38 2 MB
\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1 988\_mscorwks.dll
38 2 MB
\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW7 16\_mscorsvr.dll
38 2 MB
\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1 988\_mscorsvr.dll
37 1 KB \Documents and Settings\account\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
36 2 MB \Program Files\Common
Files\Adobe\Updater5\AdobeUpdater.exe
35 2 MB \Program Files\Red Kings Poker\Lobby.dll
33 1 KB \Documents and Settings\account\NTUSER.DAT.LOG
33 2 MB
\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW7 16\_mscorlib.dll
33 2 MB
\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1 988\_mscorlib.dll
33 2 MB \Program Files\Red Kings Poker\Game.dll
31 1 KB \WINDOWS\system32\config\SOFTWARE.LOG
30 3 MB \Documents and
Settings\good.PRO-EK1BWF15Q1U.001\Application
Data\U3\0700077A1343004C\Launchpad.exe
24 1 MB \Program Files\Red Kings
Poker\Resources\Graphics\QuickSeat-lobby-bkg.bmp
24 1 MB \Program Files\Red Kings Poker\Eventer.dll
23 1 MB \Program Files\Red Kings
Poker\Resources\Graphics\Lobby-bkg.bmp
23 38 MB \System Volume
Information\_restore{2C6F6C2A-1DE2-43A9-8ADC-E0C3C12666A3}\RP553\snapshot\_REGISTRY_MACHINE_SOF TWARE
23 13 MB \Documents and
Settings\good.PRO-EK1BWF15Q1U.001\Local Settings\Application Data\IconCache.db

I ran Disk Cleanup, defragmented C: drive and removed System Restore Point
two-three days ago.
Actually I didn't experience the freezing recently but i thought that it
might be some bug and that's why I'm refering this request for help.

Thanks


"Todor G" wrote:

The startup of service Windows Management Instrumentation has been set
to Automatic. The Windows Management Instrumentation Driver Extensions
services is set to manual startup.

Was this as you found it or after you had made amendments? Are you still
getting Event Viewer error? We may need took further!

Your system is over reliant on using the pagefile. This is one reason
why you are experiencing poor performance.You need to increase your RAM
memory to 512 mb.

88 running processses is a lot for a machine with so little RAM

You should be able to gather more information from Task Manager. With
the Processes tab open select View, Select, Columns and check the boxes
before Peak Memory Usage and Virtual Memory size. What are the figures
for the 8 processes using the largest amounts?

The default allocation to System Restore is 12% on your C partition
which is over generous. I would reduce it to 700 mb. Right click your My
Computer icon on the Desktop and select System Restore. Place the cursor
on your C drive select Settings but this time find the slider and drag
it to the left until it reads 700 mb and
exit. When you get to the Settings screen click on Apply and OK and
exit.

Another default setting which could be wasteful is that for temporary
internet files, especially if you do not store offline copies on disk.
The default allocation is 3% of drive. Depending on your attitude to
offline copies you could reduce this to 1% or 2%. In Internet Explorer
select Tools, Internet Options, General, Temporary Internet Files,
Settings to make the change. At the same time look at the number of days
history is held.

The default allocation for the Recycle Bin is 10 % of drive. Change to
5%, which should be sufficient. In Windows Explorer place the cursor
on your Recycle Bin, right click and select Properties, Global and
move the slider from 10% to 5%. However, try to avoid letting it get
too full as if it is full and you delete a file by mistake it will
bypass the Recycle Bin and be gone for ever.

Select Start, All Programs, Accessories, System Tools, Disk CleanUp to
Empty your Recycle Bin and Remove Temporary Internet Files. Also
select Start, All Programs, accessories, System Tools, Disk CleanUp,
More Options, System Restore and remove all but the latest System
Restore point. Run Disk Defragmenter.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Todor G wrote:

I found thи� statue of the services - didn't make any change there.
I'm still getting Event Viewer error:
Source: Userenv
I'm not running 88 processes - this is the peak CPU used by <System Idle
Process>. Processes now are 38.

In Task Manager the 8 processes using largher Peack Mem Usage are:
svchost.exe - most
ekrn.exe
iexplore.exe
TeaTimer.exe - software Spybot Serach & Destroy
explorer.exe
winlogon.exe
mmc.exe
WLLoginProxy.exe

The 8 processes using larger Mem Usage are:
iexplore.exe - most
TeaTimer.exe
svchost.exe
explorer.exe
ekrn.exe
taskmgr.exe
mmc.exe
csrss.exe

Most Page Faults (316 871) is svchost.exe

The System Restore was set to 827 MB (4%) анд тхе неь жалуе и� 618 MB (3%).
I will set it to 618 MB (3%).

I reduced the Temporary Internet Files from 580 MB to 200 MB.

Will do everything else you recommend.

Thank you so much and regards

In the Recycle Bin the allocation was set to 3% of drive - didn't make any
change.

"Gerry" wrote:

svchost.exe -you will need to look at the particular svchost image as
there are a number

Download Process Explorer.

For further information about Process Explorer see here:
http://www.microsoft.com/technet/sys...sExplorer.mspx

To ascertain which service is causing the problem select the svchost
producing the high CPU usage, right click, select Properties,
Services. Note there are the full names and some explanation of what
each service does.

You will find further information on Services here:
http://majorgeeks.com/page.php?id=12

To trace the particular Service involved you need to turn off each
service in turn and then restore it noting what effect it has on CPU
usage. However, you need to take care and watch what other Services
are dependent on that service. When you click on the Dependencies
tab allow it a little time to display the information.

It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.

ekrn.exe -Nod 32 known for high CPU usage after large download and there
may currently be a problem with Windows Live Mail.

Tea Timer known to create high CPU usage.
http://www.google.com/search?hl=en&l...aTimer.exe+cpu

explorer.exe - you could investigate further using Process Explorer.

Has the system shown any improvement since the last housekeeping.

You need to investigate adding RAM! What is the make and model of your
computer?

Your name I think is Bulgarian. Are you living in Bulgaria or elsewhere?

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Todor G wrote:

Thank you again for sharing your thorough knowledge with me!
With Process Explorer you refered me to I found that the svchost.exe in
question was a service that I don't need to be running - Windows Image
Acquisition. I found other services - Alerter - that was Automatic and set it
to Manual.

Than was great - now I feel like my PC is flying!

Thanks and have a great Holidays!

P.S. Yes - I'm Bulgarian and I'm living in Bulgaria.

"Gerry" wrote:

Todor

You may identified the likely cause of the problem but your solution is
a work around and not a proper solution. You need to pinpoint the exact
cause otherwise you will have problems every time you need to use the
WIA service.

Have you made any recent changes to printers / scanners connected to the
computer or cameras? The problem could well be a misbehaving driver,
which needs to be updated!

What is the make and model of your computer?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Todor G wrote:

Gerry
I believe that the PC I'm currently using doesn't have the abilities that
I'm squeezing out. There are other problems /not that much as when I had not
licensed Windows/ such as Autoplay Handlers /my previous nikname/ which might
be a Policy problem. Anyway.
This aprticular problem - Windows Explorer - seems to me important to be
fixed, it's obvious why.
Still I'm receiving the error in Event Viewer <Windows couldn't log the RSoP
(Resultant Set of Policies) session status. An attempt to connect to WMI
failed. No more RSoP logging will be done for this application of policy.>
but when I need this service I'll look for further info.
Besides there is a link in the error message that I followed and I did
whatever it directed me to do but the problem still exists and it doesn't
frighten me.
Fortunately my PC at work is 100 times better than this one that I'm using
only for entertainment. I can't tell who is the make and model because most
likely there is a mix of models. I've got the PC before Windows XP.

Thanks

"Gerry" wrote: