System locks-up intermittently

[Awdiofreq]

Hope someone can help with this one ! Just built my pc 4 months ago & has been working great & very stable untill recently when it has started to lock-up intermittently. I then have to hit CTRL ALT DEL twice, which brings up an error message "the system is either busy or has become unstable". At this point the only way to free up the system is by doing a hard reset, which then scans the disc for errors since it wasn't shut down properly. I havn't installed any programs recently either. I've also noticed that when I try to open up some folders like "my computer or windows explorer, the folder will open but the files are missing. The same happens if I have the system search automatically for a file...nothing, just locks up. Certain programs like windows media player & Adaptec create cd will open & then lockup. All these problems occured at the same time. At first it was just a matter of the system locking up intermittently, so I ran scan disc & defragged the hd, which seemed to make matters worse. After that is when I noticed the problems with opening the folders & some programs. These are some of the things I've done to try to correct all this:

1-Ran Maxtor Hard drive tester program, which detected no problems.
2-Ran Simmstester to check my ram, which detected no problems.
3-Ran system file checker, which detected no problems.
4-Ran virus scan, no virus's found.
5-Ran I.E. repair.
6-Ran Spybot to check for any spyware, which detected about 6 cookies that were problematic & corrected them. After running this the system seemed stable for a short while, but still continues to lock-up, but not as frequently.
7- Tried to restore registry, but any date that I'd input would end with a "regisrty restore failed" message.
8- checked for overheating, but this doesn't seem to be an issue. I've an exhaust fan installed in a pci slot along with a front case fan. And I've been using a small portable electric fan pointed at the front of my pc to be on the safe side.
9-Went into safe-mode & all seemed to work just fine, but not sure what to do from inside safe-mode to correct this ? Any Ideas ? The problem occurs on or off the internet.

Is there anything else I can check for ? As a last resort would it be adviseable to re-install my OS. if so, could I re-install from the cab files rather than performing a full install where I'd lose all my files ? I checked and have 53 cab files on my system, but I've read you need the full 55 to re-install. Sorry for the long thread, but tried to give as much info as possible to help narrow down the problem & save us all time. Any help and ideas would be GREATLY appreciated!! Thanks in advance. My system specs are as follows:

AMD Duron 1.3ghz
MSI M2MCombo mobo
256mb ram
Windows '98 (first version)
I.E. 5.0

[Budfred]

Thanks for all that info, it saves having to suggest things that you have already done.

The next two things I would try is to run Hijack This and post the log here for the experts (not me) to review and determine if you have a hijacker/trojan. Then I would also look in msconfig in Startup and turn off anything I didn't recognize except for systray and explorer. If it runs well, you can try adding back one program at a time to see where is glitches.

Go to mjc's security thread (http://www.pcguide.com/vb/showthread.php?s=&threadid=15179) for a link to Hijack This....

[Awdiofreq]

Here's a log of Hijackthis. Hope someone can help me out. Also, when I go into msconfig I'm not sure what to remove & what to keep. Thanks !

Logfile of HijackThis v1.96.4
Scan saved at 12:40:53 PM, on 9/13/03
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v5.00 (5.00.2919.6304)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 4\CREATECD\CREATECD.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\PROGRAM FILES\INTELISPAN\INTELIGATE3 V3.3.1\IVPN.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\HIJACKTHIS[1]\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.earthlink.net/partner/more/msie/button/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.earthlink.net/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.earthlink.net/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.earthlink.net/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by EarthLink Network, Inc.
F1 - win.ini: run=hpfsched
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CreateCD] C:\PROGRA~1\ADAPTEC\EASYCD~1\CREATECD\CREATECD.EXE -r
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[Budfred]

I am afraid I don't know enough about hijackers/trojans to give you feedback on the log, but hopefully someone who does will come along soon.

For msconfig: you can just disable everything except systray and explorer and then try to reboot and see what happens. If there are no problems, it means that one of the programs you disabled was the problem. You then go back to msconfig and start reenabling programs again, one at a time. Reboot each time and see what happens. When you get to the offending program, the problem should happen again. It is a bit tedious, but probably the best way to do it if you aren't familiar with the startup programs at all....

[Awdiofreq]

Thanks Budfred, your help is greatly appreciated ! I'll give that a try. Also, wanted to post the log of my start-up list from Hijackthis for anyone who can help.

StartupList report, 9/13/03, 1:04:37 PM
StartupList version: 1.52
Started from : C:\UNZIPPED\HIJACKTHIS[1]\HIJACKTHIS.EXE
Detected: Windows 98 Gold (Win9x 4.10.1998)
Detected: Internet Explorer v5.00 (5.00.2919.6304)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTELISPAN\INTELIGATE3 V3.3.1\IVPN.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\HIJACKTHIS[1]\HIJACKTHIS.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
TaskMonitor = C:\WINDOWS\taskmon.exe
SoundMan = SOUNDMAN.EXE
CreateCD = C:\PROGRA~1\ADAPTEC\EASYCD~1\CREATECD\CREATECD.EXE -r

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=hpfsched

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 9/9/2003, 18:34:8)

[rename]
NUL=c:\windows\temp\tmp2\setup.exe
NUL=c:\windows\temp\tmp2

--------------------------------------------------


Enumerating Task Scheduler jobs:

Tune-up Application Start.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL

--------------------------------------------------
End of report, 3,530 bytes
Report generated in 0.022 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[Awdiofreq]

Unchecked everything in msconfig except explorer & sys tray. Rebooted and still have the problem of not being able to open up folders like "my computer", windows explorer etc. The system just locks up. The same with running some programs like media player & EZCD creator. I have to hit CTRL ALT DEL > end task, then I continue to get the same error message "the system is either busy or has become unstable", at which point all is locked up again & the only way out is hitting the reset button on my pc. What could be causing this ?

[Awdiofreq]

Also, as I stated earlier in my thread, if I go into safe-mode all seems to work just fine. Not sure though what steps to take to correct this once in safe-mode. Any ideas ?

[mjc]

Ok, nothing out of the ordinary shows in that log, but that doesn't mean that one of of the items listed ins't respnisible......but (hehe a but to the but) you did try without any startups so it probably isn't any of them.

If Safe mode is fine then it could be a driver issue.

Also, go to System Properties => Performance => and see if it says your system is configured for optimal performance.

Then check in device manager for any conflicts.

[Awdiofreq]

Sorry I havn't gotten back sooner, but my system crashed & has been down for a while. According to a pc repairman, my OS (Win.'98 1st edition), which is over 4 years old basically gave out. I've installed windows 98SE and all is working fine now. A big thanks to all who helped & replied to my post. It is greatly appreciated !!