UNSOLVED

johnnytech

updated

22 years ago

J

johnnytech

31 Posts

0

6237

June 21st, 2004 20:00

Desktop Instabilty

I originally posted the following message at the BIOS Forum and "Majestic" suggested that I post it here as well. Also, I've added a PS. UPDATE below which outlines subsequent input I've received and action I've taken. 

I'm running a Dimension 8100 1.3 GHz P-4 w/ 640 RDRAM. My system came with WinMe and, in April `02, I upgraded with a clean install of WinXP. Twice since then, I've experienced so much system instability that I had to reinstall my OS. The second time, I realized/discovered the cause was an ACPI problem caused by not having updated my BIOS (A06 was only meant for pre-XP systems) and so updated my BIOS from A06 to XP2. The ACPI problem that caused system instability was eliminated but I still seem to have some instability. Quite often (sometimes as often as every 30-60 minutes), when I click on an icon on my Desktop, everything except my wallpaper momentarily disappears (blinks out and back in). When everything reappears, things work fine but I'd like to get to the bottom of it.

PS. UPDATE: I've just run an SFC /ScanNow with my WinXP System Disk on the advice of someone who takes care of about 100 Dells (2 of which are Dimension 8100's.) He says that he's found 8100's to be problematic in this area and that running the SFC /ScanNow utility has given him satisfaction in resolving this issue.

Does all this ring a bell with anyone? Will I need to clean install WinXP again? If so, will the Files & Settings Transfer utility enable me to avoid having to redo all my Windows updates and Virus Definition File updates?

Thank you so much for enlightenment anyone can pass my way!

John.

  • dunedin

    2732 Posts

    361

    0

    Posted June 21st, 2004 21:00

    I take it that system file check did not fix the problem.

    Right click My Computer / Properties / Hardware / Device Manager.   Look for "Yellow" errors.  Check you video card.  Right click on it and check if it has any problems.

    If you reinstall XP the Files and Settings Transfer Utility will not help.  It is only used to transfer files between two different machines. You will have to redo all Win Updates and Virus Definitions.  You will also lose SP1 unless it is on your installation CD and any programs/data on the same partition as XP. 

     If you do a repair you would not lose your programs or data.

  • johnnytech

    31 Posts

    361

    0

    Posted June 22nd, 2004 10:00

    You're right, Dunedin; the problem remains. In fact, just a few minutes ago, the File Protection Service came up and said that files in my OS had been replaced by unknown ones and that to avoid system instability, I should insert my System disk to reinstall the correct files. I did this and nothing happened. I believe that the FPS was only reacting to the SFC /ScanNow I ran earlier.

    I'm going to try running a repair reinstall and will post my results over the next few days when time permits me to do the job.

    Thanx for your feedback!

  • johnnytech

    31 Posts

    361

    0

    Posted June 24th, 2004 10:00

    UPDATE:

    Since my last post, all hell has broken loose and following are the details:

    Over the past 24 hours, I've been dealing with a problem which seemed to point to the MSBLAST or Welchia Worm. CPU usage shoots up to 100% after my Firewall issues the following Alert: "TFTP App v5.1.2600.0 located in C:\WINDOWS\system32\ has tried to access the Internet"; the CPU usage surge (and subsequent slowdown) occurs as soon as the Alert appears and my "Yes" or "No" has no effect on its behavior. If I stay offline, I'm fine; if I go online, this can take anywhere from 2 to 45 minutes to happen.

    I've performed searches of all processes running, done "Find" in my Registry and done a "File Search" in Windows for any indications of infection and found nothing anywhere. I have both svchost.exe and dllhost.exe where they should be: in my System32 Folder and not in System32\Wins Folder (which would indicate infection, I gather); in fact, my Wins Folder is empty. Nonetheless, I've downloaded the MS XP patches for DCOM/RPC Exploit and WebDAV Exploit. All this has happened since I ran the SFC utility to try to correct a desktop problem I was having; before doing that, I'd never seen a TFTP Alert. I believe this doesn't make sense but it's what has happened. One added curiousity: I've located an scvhost.exe and dllhost.exe in C:\WINDOWS\lastGood.Tmp\system32 and haven't been able to find anything written on this.

    I have McAfee VirusScan and am always updated, have run a full manual Scan, have an active Firewall as well as Ad-Aware and Spybot S&D. This system is a Dell Dimension 8100 P4 1.3 GHz w/ 640 RDRAM.

    PS.Since starting this post, I've received a TFTP request twice and since the first one, my performance has slowed to half and I have a svchost.exe (SYSTEM) running up to 99% of my CPU resources.

    Any ideas?

  • dunedin

    2732 Posts

    361

    0

    Posted June 24th, 2004 11:00

    Hi,

    dllhost.exe should live in c:\windows\System32 folder. In other cases, dllhost.exe is a virus, spyware, trojan or worm!

    svchost is a Windows file.  SCVHOST is not.   I think this is the cause of your problems.

    File scvhost.exe is related to worms W32.HLLW.Gaobot, W32.HLLW.Gaobot.AA, W32.HLLW.Gaobot.AE, W32.HLLW.Gaobot.

    Make sure you have run your antivirus, AdAware and Spybot, and then you need to run
    Hijack This           http://mjc1.com/mirror/hjt/
      
     Make a special folder to download it to. Set it to "Scan" and then to create its "Log". This will be long, but copy all of it into Notepad and post it to be checked.

     

     

     


     

  • simpswr

    2 Intern

    •

    3224 Posts

    361

    0

    Posted June 24th, 2004 12:00

    Actually the Files and Settings Transfer will work fine when reinstalling . . you just have to "trick" the wizard by telling it you are collecting from the "Old" pc . . save the file somewhere that the format and reinstall will not delete it and import by telling the wiz that it is the "New" PC . . Depending on size of the file the wiz produces you can save it to CD, DVD or a network drive.

    wrs