UNSOLVED
KF
Kathy Fowler
28 Posts
0
9759
April 22nd, 2004 06:00
Everything is "not responding"
Inspiron 2650, Pentium 4M, 1.70GHz, 512 MB Ram, XP Home Edition.
Outlook usually works for a bit, then hangs up with "not responding." I can open Explorer as long as I have it set for a blank homepage; but if I pick anything in my "favorites" list, it's "not responding" instantly--no graphics load, the bar across the bottom of the window just barely starts to move. Adaware, Spybot, and Spyware Blaster all found things but cleaned them successfully (took Spybot two tries; it was "not responding" too), with no improvement. Sometimes, with no apps open, even the "My Documents" window will be "not responding."
Quitting from Task Manager is iffy--it closes the problem app less than half the time, and then only on repeated tries. (And sometimes even Task Manager is "not responding.") If Task Manager is successful, a reboot will be required because, even after quitting the app, Task Manager will show CPU usage at 100%. (It's only about 2% when I first boot up.) When I restart--especially if I do it from the Task Manager window after Task Manager has failed to close the app--I often get an error on shutdown: CiceroUIWndFrame is "not responding" (I have no earthly idea what that is).
I've done a repair/reinstall of XP and a clean installation of Office itself. While I was online, the updates (service packs and security upgrades) downloaded, but I can't get them installed..."not responding."
Once upon a time, Norton Antivirus located an Adware file it couldn't delete. I deleted it myself, but I think that was long before this problem started. The worst of the problems seemed to begin the same day I downloaded Office XP SP3, but I'm not absolutely sure those two events are related. The laptop's pretty much been useless for a week, and I had to get an elderly Gateway clunker hooked up to a dial-up ISP even to get to this site for help.
Here's my HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 1:48:21 , on 4/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~3\NPROTECT.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Dell\AccessDirect\DadTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Extensis\Suitcase\Suitcase.exe
C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\PROGRA~1\NORTON~1\NORTON~3\SPEEDD~1\NOPDB.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe
C:\Documents and Settings\Kathy Fowler\My Documents\HijackThis.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://sidebar.smarter.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.smarter.com/index.php?sidebar=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://sidebar.smarter.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.se1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.se1.attbb.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [DVDUpgrade] DVDUpgrd.exe /async
O4 - HKCU\..\Run: [HXIUL.EXE] C:\Program Files\Cosmi\HelpExpress\Kathy Fowler\HXIUL.EXE
O4 - HKCU\..\Run: [HELPEXP.EXE] C:\Program Files\Cosmi\HelpExpress\Kathy Fowler\Client\HelpExp.exe
O4 - HKCU\..\Run: [HXDL.EXE] C:\Program Files\Cosmi\HelpExpress\Kathy Fowler\HXDL.EXE -from="CLIENT.CAB" -to="CLIENT.CAB"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Suitcase Startup.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Coupons - file://C:\Program Files\websearch\System\Temp\couponsandoffers_script0.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Research (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: MoneySide (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4F5E4276-C120-11D6-A1FD-00508B9D48EA} (dldisplay Class) - http://www.gamehouse.com/ghdlctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/088da328670e062ee406/netzip/RdxIE601.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38092.2931944444
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
It's 3am local time, and I've had enough fun playing with the laptop for today. I'm going to bed and hoping that some of you geniuses will have suggestions for me when I come back after a little sleep. Thanks.
Kathy
494
0
Posted April 22nd, 2004 13:00
Okay, I've removed the "Speech and Handwriting Recognition" portion of Windows. I didn't really need these features; the things I've been shouting at this laptop aren't actually executable commands, anyway. :( This will prevent my getting the CiceroUIWndFrame not responding message on shut-down.
However, it doesn't fix the actual problem of Explorer "not responding" and Outlook "not responding", etc.
For what it's worth, the full-blown version of Adobe Acrobat works fine and doesn't give me the "not responding" message; same thing with Photoshop and Quark. Norton Utilities fails sometimes (occasionally during the one-button checkup). A really complicated Mahjongg game--with DirectX video effects--runs without problems (except for an occasional hesitation after I've clicked a tile). And sometimes when I go to Task Manager to quit Outlook or Explorer, Task Manager will show multiple lines of Outlook Not Responding, even though there is only one open window (just one indicator on the task bar). And my present problems occur whether I've got my cable internet connected to the laptop or not (that is, I'll open Outlook, get my mail, lock up while reading it, so I disconnect the cable internet, reboot, go back into Outlook to read the mail, it'll lock up again while I'm reading another piece of mail, etc.)
Kathy
494
0
Posted April 22nd, 2004 14:00
I removed the Speech and Handwriting Recognition features. I had to reboot afterwards (something else hanging up after I removed the feature).
But now, I've just had Outlook not responding again, and when I rebooted, I still got the "CiceroUIWndFrame (not responding)" message. So getting rid of the Speech and Handwriting Recognition features did not eliminate the file, or stop it from loading at some point (so that it's open and can't close at shutdown).
I'm fairly certain this file is not the problem--lots of times, I don't get any error message about it. I just think that when whatever else is wrong goes wrong, Windows sometimes just stops allocating any resources at all to the Cicero... thingy, so that it's a symptom of my problem...not the cause.
Kathy
494
0
Posted April 22nd, 2004 15:00
Kathy Fowler,
You will get more meaningful assistance if you post your HijackThis log in the Special Interest - Virus Information and Removal conference. That is where the HJT experts are.
The other option is a clean reinstall of XP. A repair reinstall will correct problems with the operating system but will leave any unwanted items in the system.
GrfxLuvr
6 Posts
494
0
Posted April 22nd, 2004 06:00
found this information using search>> Quoted:
Recently, my system has been crashing more often, due to a process or program "CiceroUIWndFrame."
I found out that this is the "Speech and Handwriting Recognition" part of Office XP. To de-install it, go to
"Control Panel"
"Add/Remove Programs"
"Microsoft Office," click on the "Change" button
browse to "Office Shared Features," "Alternative User Input," and select for Speech and Handwriting Recognition (both) "Not available" from the drop-down box.
Perform the change and the CiceroUIWndFrame messages disappear. Took just a second, and you don't even have to restart your system or insert the XP Office CD.