[Resolved] Error 0x0248f7a0 AXWIN Frame Window:svchost.exe

[anthonymcfla]

OK, i think t will take time (because 300MB is big enough for me to be downloaded, I'll try)..
But, in microsoft's site, it says,
DO NOT CLICK DOWNLOAD IF YOU ARE UPDATING JUST ONE COMPUTER: A smaller, more appropriate download is now available on Windows Update. The best way to ensure you get Windows XP Service Pack 3 is by turning on the Automatic Updates feature in Windows XP. You can use our step-by-step instructions or, if you prefer, let us do it for you.
And now, actually, my windows update offers me to install Windows SP3,  i haven't click install yet, but it have been downloaded 43% (Automatic Update)..

[PCBruiser]

Hi,

I am sorry for the delay in responding, but we had a major power outage in the evening of 2/14 which finally got resolved late yesterday.  I was able to get here briefly because they temporarily restored power so we could reheat our homes - it was cold.

OK, let me know when everything finishes.

[Hoov]

anthonymcfla, I am taking over for PCBruiser. Life is intruding on him.

Can you update me on what you have done (since your last posting), and where the problem is right now?

[Hoov]

This thread is being closed due to inactivity. If you need it reopened send me a PM. This applies to the originator only. Anyone else please start a new thread.

[Hoov]

Reopened at the request of the originator.

[anthonymcfla]

OK..
After I update to SP3 and do all the things that instructed, a problem that still on my computer is when I turn on my computer, when welcome screen (desktop) is displayed, it needs 2 minutes to can be used immediately, but if it turned on from its hibernate condition, it just take 10 seconds since its desktop is displayed. Would you help me to solve it?
Oia, 1 again, when PCBruiser clean my compyter by his programs(I don't know, by HJ or combofix), it deletes my D:\autorun.inf, which is in my recovery partition Hard Disk from the vendor(HP) -- it works like displaying a text that say "don't delete or change this data, this is a recovery partition disk", so I can't change any data in it before--, he had tried to make it back, but couldn't.. Can you help me to restore it?
Thank You very much..

[Hoov]

The recovery partition should not be accessible from inside windows. At least none of them that I have every run into is. Can you see the other files in this partition?

Also the boot time taking two minutes, while a bit high, will always be higher that coming out of hibernate.

When the computer goes into hibernate, everything in memory is written to the harddrive in a file. So when coming out of hibernate, all that needs to happen is restoring that single file to memory, and the state of the computer will be returned to the pre hibernate condition.

When starting a computer from scratch, each file needs to be read off the harddrive and all the commands followed for each of the programs set to run. This includes a large number of programs and files that are the windows OS that you will never see, or have control over.

It might be possible to reduce the start time to something a little faster. How many programs are set to start with windows that you do not use a lot? This could be things designed to start programs faster.

Please download RunScanner

• Save it to a folder you create such as C:\Runscanner (this assumes Windows is installed on your C: drive).
  
• Launch Runscanner by double-clicking runscanner.exe within the C:\Runscanner folder.
• Vista users must also click Continue to open Runscanner when prompted by User Account Control (UAC)
• Check Beginner Mode
• Click Scan computer
• Your will see a "Runscanner scan in progress" window displayed while Runscanner scans your system
• At the conclusion of the scan, save the run file called runscanner.run to your documents folder or directly to the Runscanner folder. This is the file you will need to upload.
• A runscanner.log file will automatically open in Notepad. Just close the Notepad window because, it is ONLY the runscanner.run file that we are interested in.
• Next, zip up the runscanner.run file that you just saved.
• I want you to upload the zipped runscanner.run file as an attachment in your next reply
• To do that choose "Additional Options" under "Post Reply"
• Browse to the zipped RUN file location and then click the "Post" button to attach the file.
• I will review the run file, and then upload it back to you with items marked for deletion.
• Please await my directions and the returned RUN file, and do not delete anything in the interim

[anthonymcfla]

The Folders in it are:
-cmdcons
-I386
-MiniNT
-PRELOAD
-RECOVERY which is have locked logo and will display like this if clicked   
Recovery Partition
Warning!
 
This area of your hard disk
(or partition) contains files used
for your system recovery.
 
Do not delete or alter these files.
 
Any change to this partition could
prevent any recovery later.
D: Partition is like this before, but now, just RECOVERY Folder which act like this.

This is the zipped file..
Thanks for your help..

[Hoov]

About the Autorun issue, there is no getting that back, but I don't really think you need to worry about it. If you ever need to use that partition, you will not need that file, and I cannot think of why that file was there to begin with.

About your startup time issue, there may be a resolution to that. But I need one more log from you to be able to tell you for sure.

Startup hijackthis, and go to the Misc tools section. Then up at the top there is a button marked Generate StartupList log. Click that button and then copy the contents of the log it generates, and paste it in a reply. DO NOT check the two boxes next to the button.

[anthonymcfla]

StartupList report, 5/14/2010, 9:04:04 PM
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP3 (WinNT 5.01.2600)
Detected: Internet Explorer v8.00 (8.00.6001.18702)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\plugins\NPSWF32_FlashUtil.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Modem AC2726 UI\bin\MonServiceUDisk.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\progra~1\common~1\instal~1\update~1\isuspm.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\agent.exe
C:\Program Files\Modem AC2726 UI\bin\App.exe
C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE
C:\WINDOWS\system32\ping.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SynTPEnh = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
RecGuard = C:\Windows\SMINST\RecGuard.exe
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
QPService = "C:\Program Files\HP\QuickPlay\QPService.exe"
Microsoft Default Manager = "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
igfxtray = C:\WINDOWS\system32\igfxtray.exe
igfxpers = C:\WINDOWS\system32\igfxpers.exe
igfxhkcmd = C:\WINDOWS\system32\hkcmd.exe
hpWirelessAssistant = C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
HP Software Update = C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
High Definition Audio Property Page Shortcut = CHDAudPropShortcut.exe
eabconfg.cpl = C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe
avgnt = "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
Adobe Reader Speed Launcher = "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Adobe ARM = "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
UVS12 Preload = C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe
SynTPStart = C:\Program Files\Synaptics\SynTP\SynTPStart.exe
ISUSPM Startup = C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
ISUSScheduler = "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
SunJavaUpdateSched = "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

swg = "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
 =

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\AutoCADScriptFile\shell\open\command

(Default) = C:\WINDOWS\system32\notepad.exe "%1"

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\system32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

btorbit.com - C:\Program Files\Orbitdownloader\orbitcth.dll - {000123B4-9B42-4900-B3F7-F4B073EFC214}
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll - {0347C33E-8762-4905-BF09-768834316C61}
AcroIEHelperStub - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll - {22BF413B-C6D2-4d91-82A9-A0F997BA588C}
(no name) - (no file) - {5C255C8A-E604-49b4-9D64-90988571CECB}
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
(no name) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
(no name) - C:\Program Files\MSN\Toolbar\3.0.1125.0\msneshellx.dll - {d2ce3e00-f94a-4740-988e-03dc2f38c34f}
(no name) - C:\Program Files\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}
JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll - {E7E6F031-17CE-4C07-BC86-EABFE594F69C}
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}

--------------------------------------------------

Enumerating Task Scheduler jobs:

AppleSoftwareUpdate.job
Easy Internet Sign-up.job
GoogleUpdateTaskMachineCore.job
GoogleUpdateTaskMachineUA.job
HPCeeSchedule.job
Norton Security Scan.job

--------------------------------------------------

Enumerating Download Program Files:

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1266340260593

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #4: C:\Program Files\Bonjour\mdnsNSP.dll

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll
UPnPMonitor: C:\WINDOWS\system32\upnpui.dll
WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll

--------------------------------------------------
End of report, 9,235 bytes
Report generated in 0.235 seconds

Command line options:
   /verbose  - to add additional info on each section
   /complete - to include empty sections and unsuspicious data
   /full     - to include several rarely-important sections
   /force9x  - to include Win9x-only startups even if running on WinNT
   /forcent  - to include WinNT-only startups even if running on Win9x
   /forceall - to include all Win9x and WinNT startups, regardless of platform
   /history  - to list version history only

[Hoov]

Get Mike Lin's Startup Control Panel and install it. Don't get the standalone version. Install it, and then go to the windows control panel and start the Startup Control Panel.

In there, if you go thru the tabs, you can keep programs from starting with windows. Go thru the lists and uncheck the ones that you don't use frequently. Like Quicktime, Adobe Reader, and others like it. For the most part these kinds of entries load these programs in the background in case you need them. If you can wait the extra 15 or 30 seconds for the program to open then uncheck it. If you don't know what the program is, ask. I would tell you exactly what you can uncheck, except your computing habits are different than mine, so I don't know what you use often.

[anthonymcfla]

OK, I've Installed it.
Would you tell me, how need my computer to run ADOBE ARM and Adobe Reader Speed Launcher? Is it affect adobe to run faster if i run it at startup?
And what is CPQset? Is it related to HP, which I must run it at startup?
Oia, and my HP Software Update and ISUSPM Startup(I don't know which one), it always tells me that it can't connect to internet although I have(occurs every startup)
Must I run igfxhkcmd, igfxpers, igfxtray, RecGuard(In 'SMINST' Folder)? And what for?
Thank You very much for your assistance..

[Hoov]

Both of the Adobe programs are only meant to start the Reader faster if you need it. I have disabled both, and it only adds a few extra seconds to the startup time of the reader.

CPQset is for configuring multimedia devices on your computer. HP Software Update updates the HP software on your computer. You don't need that. I have been using HP software for years, and not a single time did it ever get updated thru this program. ISUSPM Startup is the InstallShield Update Service Scheduler, if you remember to run this once a month, you can kill this one. RecGuard is suppose to prevent changes to the recovery partition.

igfxhkcmd Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via the Display Properties in Control Panel.

igfxtray Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel

igfxpers Leave this one alone.

Of all the programs you asked about, the only one I think you should leave alone is igfxpers, the others can be gotten to thru the control panel, or are just for checking for updates. I have turned all those kinds of software off and use Secunia PSI That monitors all your software.

Hows that? Let me know how the computer starts after this.

[anthonymcfla]

I'm so sorry if this makes you disappointed, but everything works like before, after desktop screen display, i must wait until 1 minute to can click start menu, in that 1 minute, if i move my pointer to taskbar, it indicates "very busy". My shutdown time also 1-2 minute, is it normal? And also my windows screen loading, if i count, there are 29 times rolling..

Thank You very much for your help..

[Hoov]

Lets see if it what you have running, or the computer, or something else.


Go to the run command and type in msconfig. Then check the selective startup box. Then under that, uncheck the box box load startup items, then click Apply then click OK and then reboot windows. See how long it takes for windows to start, and then reboot the computer and see how long it takes to shutoff.

Once you have seen how it works, go back into msconfig and select normal startup, and then select apply and then OK. Then let me know how it did.

Are you having any other problems other than slow startup and shutdown?