Explorer Not Responding and F-Secure Logs to Event Viewer

**Charles Law**

Thanks, but I just picked these two entries at random. There are many more,
and I have no reason to believe that there is a problem with any of them per
se. I was just illustrating the fact that the symbols vanished when Explorer
crashed.

Charles

"JS" @ wrote in message ...
Well there certainly is not a lack of articles in MS Knowledge Base on
shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running properly,
the symbols in the Process Explorer threads list are shown. That is,
there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message ...
Once you have removed 'All traces' of F-Secure then I would take another
look using Process Explorer. The CPU graph at the top might give you
some help (move the mouse cursor over any spike in the graph for
locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There are
umpteen things that get loaded at start-up, and I haven't a clue what
they all do. In order to get some response from the machine I disable
them all.

I've got to the point now where I am fairly satisfied that F-Secure is
my 'slow-down' problem, so I might well ditch it and go with something
like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home in on
what is pulling it down, but this is proving far less straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message ...
Does F-secure have a background task that monitors disk and process
activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the same
time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is that
with F-Secure enabled the machine runs so slowly that I cannot run
any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using much
CPU. Idle is around 85-90%. I still get the Explorer hang though.
Each time I can restart it with Task Manager, but I can't find out
what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application running
under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show
Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU usage.
Next click on the CPU column to sort the processes by %CPU usage
(Highest to Lowest).
Then click on the process that's using most or all the CPU % the
highlight it,
Now that it's highlighted, right click and from the options listed
select: Search Online
This should display what out there on the web about that process.
You can also double click on any process to open up a more detailed
'Properties' window.

Note: some entries like Explorer and System/Services may need to be
expanded to show the detail,
(sub processes), in this case click on the + located to the left of
the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers greatly
received.

I have a Windows XP Home machine running F-Secure anti-virus. When
it boots it logs in to Windows and then runs so slowly that it
appears to have frozen. If I boot into Safe Mode I can see that
F-Secure has been madly logging to the Application Event Log: Event
103 - "One of the scanners could not scan because the definition
database was not available at this time; scanning passed to the
next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure Gatekeeper,
reporting a problem with TNBUtil.exe (what ever that is).

I restart in Diagnostic Mode using MSConfig, and all seems to run
smoothly, except that, within a couple of minutes the machine
appears to stop working. I can Ctrl+Alt+Del to get Task Manager and
I see that Explorer has stopped responding. I end task, and things
come back to life, and thereafter the machine runs sweetly, albeit
most drivers are not loaded and services are disabled. [Having said
that, I just noticed that Explorer hung again, but I ended the task
and it came back to life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

JS

Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any of
them per se. I was just illustrating the fact that the symbols vanished
when Explorer crashed.

Charles

"JS" @ wrote in message ...
Well there certainly is not a lack of articles in MS Knowledge Base on
shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running properly,
the symbols in the Process Explorer threads list are shown. That is,
there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the graph
for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There are
umpteen things that get loaded at start-up, and I haven't a clue what
they all do. In order to get some response from the machine I disable
them all.

I've got to the point now where I am fairly satisfied that F-Secure is
my 'slow-down' problem, so I might well ditch it and go with something
like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home in
on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and process
activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the same
time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I cannot
run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using much
CPU. Idle is around 85-90%. I still get the Explorer hang though.
Each time I can restart it with Task Manager, but I can't find out
what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application running
under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show
Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU usage.
Next click on the CPU column to sort the processes by %CPU usage
(Highest to Lowest).
Then click on the process that's using most or all the CPU % the
highlight it,
Now that it's highlighted, right click and from the options listed
select: Search Online
This should display what out there on the web about that process.
You can also double click on any process to open up a more detailed
'Properties' window.

Note: some entries like Explorer and System/Services may need to be
expanded to show the detail,
(sub processes), in this case click on the + located to the left of
the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers greatly
received.

I have a Windows XP Home machine running F-Secure anti-virus. When
it boots it logs in to Windows and then runs so slowly that it
appears to have frozen. If I boot into Safe Mode I can see that
F-Secure has been madly logging to the Application Event Log:
Event 103 - "One of the scanners could not scan because the
definition database was not available at this time; scanning
passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever that
is).

I restart in Diagnostic Mode using MSConfig, and all seems to run
smoothly, except that, within a couple of minutes the machine
appears to stop working. I can Ctrl+Alt+Del to get Task Manager
and I see that Explorer has stopped responding. I end task, and
things come back to life, and thereafter the machine runs sweetly,
albeit most drivers are not loaded and services are disabled.
[Having said that, I just noticed that Explorer hung again, but I
ended the task and it came back to life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

Unfortunately I don't have that information as I am trying to fix this for a
friend, and auto-updates are enabled, so they probably wouldn't know either.
Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any of
them per se. I was just illustrating the fact that the symbols vanished
when Explorer crashed.

Charles

"JS" @ wrote in message ...
Well there certainly is not a lack of articles in MS Knowledge Base on
shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are shown.
That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the graph
for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There are
umpteen things that get loaded at start-up, and I haven't a clue what
they all do. In order to get some response from the machine I disable
them all.

I've got to the point now where I am fairly satisfied that F-Secure
is my 'slow-down' problem, so I might well ditch it and go with
something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home in
on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and process
activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the same
time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I cannot
run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I can't
find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application running
under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show
Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU usage
(Highest to Lowest).
Then click on the process that's using most or all the CPU % the
highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need to
be expanded to show the detail,
(sub processes), in this case click on the + located to the left
of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers greatly
received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly that
it appears to have frozen. If I boot into Safe Mode I can see
that F-Secure has been madly logging to the Application Event
Log: Event 103 - "One of the scanners could not scan because the
definition database was not available at this time; scanning
passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever that
is).

I restart in Diagnostic Mode using MSConfig, and all seems to run
smoothly, except that, within a couple of minutes the machine
appears to stop working. I can Ctrl+Alt+Del to get Task Manager
and I see that Explorer has stopped responding. I end task, and
things come back to life, and thereafter the machine runs
sweetly, albeit most drivers are not loaded and services are
disabled. [Having said that, I just noticed that Explorer hung
again, but I ended the task and it came back to life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

JS

None specific, but a number of systems have had problems with IE7, but since
auto-updates is enabled IE7 was most likely installed some time ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this for
a friend, and auto-updates are enabled, so they probably wouldn't know
either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message ...
Well there certainly is not a lack of articles in MS Knowledge Base on
shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are shown.
That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the graph
for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There are
umpteen things that get loaded at start-up, and I haven't a clue
what they all do. In order to get some response from the machine I
disable them all.

I've got to the point now where I am fairly satisfied that F-Secure
is my 'slow-down' problem, so I might well ditch it and go with
something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home in
on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and process
activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the same
time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I can't
find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application running
under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU usage
(Highest to Lowest).
Then click on the process that's using most or all the CPU % the
highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need to
be expanded to show the detail,
(sub processes), in this case click on the + located to the left
of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers greatly
received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly that
it appears to have frozen. If I boot into Safe Mode I can see
that F-Secure has been madly logging to the Application Event
Log: Event 103 - "One of the scanners could not scan because the
definition database was not available at this time; scanning
passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever that
is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get Task
Manager and I see that Explorer has stopped responding. I end
task, and things come back to life, and thereafter the machine
runs sweetly, albeit most drivers are not loaded and services
are disabled. [Having said that, I just noticed that Explorer
hung again, but I ended the task and it came back to life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

Agreed.

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message ...
Well there certainly is not a lack of articles in MS Knowledge Base on
shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are shown.
That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that F-Secure
is my 'slow-down' problem, so I might well ditch it and go with
something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the same
time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I can't
find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application running
under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU usage
(Highest to Lowest).
Then click on the process that's using most or all the CPU % the
highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need to
be expanded to show the detail,
(sub processes), in this case click on the + located to the left
of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers greatly
received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this time;
scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get Task
Manager and I see that Explorer has stopped responding. I end
task, and things come back to life, and thereafter the machine
runs sweetly, albeit most drivers are not loaded and services
are disabled. [Having said that, I just noticed that Explorer
hung again, but I ended the task and it came back to life
again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message ...
Well there certainly is not a lack of articles in MS Knowledge Base on
shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are shown.
That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that F-Secure
is my 'slow-down' problem, so I might well ditch it and go with
something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the same
time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I can't
find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application running
under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU usage
(Highest to Lowest).
Then click on the process that's using most or all the CPU % the
highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need to
be expanded to show the detail,
(sub processes), in this case click on the + located to the left
of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers greatly
received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this time;
scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get Task
Manager and I see that Explorer has stopped responding. I end
task, and things come back to life, and thereafter the machine
runs sweetly, albeit most drivers are not loaded and services
are disabled. [Having said that, I just noticed that Explorer
hung again, but I ended the task and it came back to life
again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

JS

In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

I can rule out Give4Free as I know how it got there. I used Windows
Messenger Remover today. The problem existed long before that, so I will
have to look at the others.

Charles

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component
of Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note
that I do mean Windows Explorer, as distinct from the Explorer Program
Manager, even though they appear as the same process in Process Explorer.
It is only when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with
any of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top
might give you some help (move the mouse cursor over any spike in
the graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem
is that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I
can see that F-Secure has been madly logging to the
Application Event Log: Event 103 - "One of the scanners could
not scan because the definition database was not available at
this time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding.
I end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

JS

RealSearch
RecordNow
Roxio
Nokia

All of the above bear investigation.

JS

"Charles Law" wrote in message ...
I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

JS

Also take note that Process Explorer is now at version 11.01 (bug fixes for 11.0)

JS

"Charles Law" wrote in message ...
I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

I check periodically for updates, but missed the update to 11.

Charles

"JS" @ wrote in message ...
Also take note that Process Explorer is now at version 11.01 (bug fixes for 11.0)

JS

"Charles Law" wrote in message ...
I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

I have been suspicious of Roxio in the past, not because it is dangerous in itself, but there have been many reports of its incompatibility with other programs.

I'll check each of these carefully and report back.

Charles

"JS" @ wrote in message ...
RealSearch
RecordNow
Roxio
Nokia

All of the above bear investigation.

JS

"Charles Law" wrote in message ...
I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

**Charles Law**

Ok. I am now 99% sure that the problem is Acrobat. Specifically, AcroIEHelper. I enabled everything in turn, separately, and the problem magically re-appeared when I re-enabled the Acrobat BHO. It was version 6.0, and was marked as a system component in the registry, so it was not straight forward to remove, but I have done it now. The problem has gone away.

But then, I had the idea that I would put the latest - V8 - Acrobat Reader on to the machine, and what do you know, the problem is back again. Only now, ShellEx is unable to disable the AcroIEHelper BHO.

What ever the problem is, you would have thought that Adobe would have fixed it by now, but no.

Charles

"JS" @ wrote in message ...
RealSearch
RecordNow
Roxio
Nokia

All of the above bear investigation.

JS

"Charles Law" wrote in message ...
I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

JS

I have the same BHO installed and have no problems, however there is a utility available from SysInternals called 'AutoRuns' which can be used to disable almost anything.
http://www.microsoft.com/technet/sys.../Autoruns.mspx

JS
"Charles Law" wrote in message ...
Ok. I am now 99% sure that the problem is Acrobat. Specifically, AcroIEHelper. I enabled everything in turn, separately, and the problem magically re-appeared when I re-enabled the Acrobat BHO. It was version 6.0, and was marked as a system component in the registry, so it was not straight forward to remove, but I have done it now. The problem has gone away.

But then, I had the idea that I would put the latest - V8 - Acrobat Reader on to the machine, and what do you know, the problem is back again. Only now, ShellEx is unable to disable the AcroIEHelper BHO.

What ever the problem is, you would have thought that Adobe would have fixed it by now, but no.

Charles

"JS" @ wrote in message ...
RealSearch
RecordNow
Roxio
Nokia

All of the above bear investigation.

JS

"Charles Law" wrote in message ...
I think I might be homing in. I followed your link, and the one that strikes a chord is the "buggy shell extension".

I have been using ShellEx for the last half-hour to disable all non-Microsoft shell extensions, and it seems to have stopped the hanging. I am now going to re-enable them one by one and see what breaks it. Below is a list of the extensions, for your information, and in case you spot something instantly. The Give4Free looks highly suspicious, so I'm going to Google for that now.

Thanks for sticking with me on this.

Charles

Shell Extensions List

Created by using ShellExView
Extension Name Disabled Type Description Version Product Name Company My Computer Desktop Control Panel Filename CLSID File Created Time CLSID Modified Time Microsoft File Extensions File Attributes File Size
CtMtpContextMenu Class Yes Context Menu CME ContextMenu Shell Extension 1.0.1.0 Creative Media Explorer Creative Technology Ltd No No No C:\PROGRA~1\Creative\SHARED~1\CtCmeCtx.dll {7895F317-A125-42CC-BD3E-5830765CE577} 14/09/2006 16:34:44 14/09/2006 16:39:11 No *, Folder 98,304
RealOne Player Context Menu Class Yes Context Menu RealOne Player Shell Extensions 1.0.0.447 RealOne Player RealNetworks No No No C:\Program Files\Real\RealPlayer\rpshellext.dll {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} 15/06/2004 17:23:05 22/07/2004 20:27:20 No .acp, .aif, .aiff, .au, .avi, .cda, .la1, .lar, .lavs, ..lmsff, .lqt, .m1v, .M2V, .m3u, .mnd, .mns, .mp1, .mp2, .mp3, .mpa, ..mpe, .mpeg, .mpg, .mpga, .mps, .mpv, .pls, .r3t, .ra, .ram, .rec, .rjs, ..rjt, .rm, .rmj, .rmm, .rmp, .rms, .rmvb, .rmx, .rp, .rsml, .rt, .rv, ..sdp, .smi, .smil, .ssm, .vpg, .wav, .xpl, pnm, rtsp, SSM A 45,105
MPEG2Thumbnail Class Yes Thumbnail CyberLink Thumbnail extractor 1.0.0.1020 Cinema CyberLink Corp. No No No c:\Apps\Powercinema\Video\CLMedia.dll {7F1A7DAC-CF44-453E-A03A-BCA52A80EAE4} 15/06/2004 17:21:27 22/07/2004 20:27:20 No .dat, .M1S, .m1v, .M2V, .mpe, .mpeg, .mpg, .VOB, .VRO A 36,864
HyperTerminal Icon Ext Yes Icon Handler HyperTerminal Applet Library 5.1.2600.0 Microsoft® Windows® Operating System Hilgraeve, Inc. No No No C:\WINDOWS\System32\hticons.dll {88895560-9AA2-1069-930E-00AA0030EBC8} 19/09/2002 20:44:56 19/09/2002 21:37:58 No .ht, htfile A 44,544
RecordNow! SendToExt Yes Drop Handler Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {DEE12703-6333-4D4E-8F34-738C4DCC2E04} 16/01/2004 06:00:00 15/06/2004 17:23:51 No .RecordNowSendToExt A 73,728
Monitor Class Yes Copy Hook Handler BTNCopy Module 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No No No C:\WINDOWS\System32\btncopy.dll {7842554E-6BED-11D2-8CDB-B05550C10000} 16/09/2003 18:51:34 16/02/2005 17:20:51 No Directory A 53,248
RecordNow! ContextMenuExt Yes Context Menu Shell Extensions 6.7.0.0 RecordNow! No No No c:\Apps\RecordNow\shlext.dll {E91B2703-013E-4A99-AD33-2B6FB00AA356} 16/01/2004 06:00:00 15/06/2004 17:23:51 No Drive A 73,728
Roxio DragToDisc Shell Extension Yes Property Sheet DirectCD Shell Extention DLL 6.2.0.134 Drag-to-Disc Roxio No No No C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\shellex.dll {5E44E225-A408-11CF-B581-008029601108} 09/12/2003 18:24:58 25/07/2004 16:15:32 No Drive A 262,144
My Bluetooth Places Yes Shell Folder BTNeighborhood DLL 1.4.2 Build 10 Bluetooth Software 1.4.2 Build 10 WIDCOMM, Inc. No Yes No C:\WINDOWS\System32\BTNEIG~1.DLL {6af09ec9-b429-11d4-a1fb-0090960218cb} 16/09/2003 19:13:16 12/07/2005 11:44:31 No A 790,611
My Media Yes Shell Folder Roxio AudioCentral Media Manager Shell Extension 1.1.277 AudioCentral Media Manager Roxio, Inc. No Yes No C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} 15/07/2003 12:38:28 25/07/2004 16:16:26 No A 1,191,936
Nokia Phone Browser Yes Shell Folder Nokia Phone Browser 5, 0, 2, 33 Nokia Phone Browser Nokia Yes No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrow ser.dll {40950107-FEA6-4d53-A65F-B2DCBA57DD58} 17/04/2004 09:09:40 16/02/2005 18:23:26 No A 361,472
Zen MicroPhoto Media Explorer Yes Shell Folder Creative Shell Extension 5.2.16.0 Zen Media Explorer (MTP) Creative Technology Ltd Yes No No C:\Program Files\Creative\Creative Zen MicroPhoto\SHCTMTP.dll {4AFB2C12-9D16-4478-AEF4-C3FC539961E4} 14/09/2006 16:34:31 14/09/2006 16:39:13 No 704,512
RealSearch Yes Search Handler RealOne Player Search Shell Extension 6.0.9.35 RealOne Player (32-bit) RealNetworks, Inc. No No No C:\Program Files\Real\RealPlayer\rpshellsearch.dll {A06B0DBC-8272-4D72-A366-B8090BBE1871} 15/06/2004 17:23:21 22/07/2004 20:27:20 No A 49,207
AcroIEHlprObj Class Yes Browser Helper Object Adobe Acrobat IE Helper Version 6.0 for ActivieX 6.0.0.2003051500 AcroIEHelper Library Adobe Systems Incorporated No No No C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 15/05/2003 00:47:54 22/07/2004 20:27:19 No A 50,376
Give4Free Plugin Installer Yes Browser Helper Object Give4Free Plugin 1, 0, 0, 1 Give4Free Plugin Give4Free Plugin No No No C:\Program Files\Give4Free Plugin\ibho.dll {208E7E77-507A-4649-B0C9-D39E9049C7A2} 13/09/2007 17:40:23 13/09/2007 17:40:23 No AH 34,304
Contact View Yes Shell Folder Nokia Phone Browser Contact View 5, 0, 0, 33 Nokia Phone Browser Contact View Nokia No No No C:\Program Files\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dl l {FBFE7864-D495-41f0-B7DC-4BB601CC295E} 17/04/2004 09:16:20 16/02/2005 18:23:27 No A 339,456

"JS" @ wrote in message ...
In my case I do get a delayed response whenever I select the properties
option for an entire hard drive on one of my PCs. In my case a component of
Norton Ghost (LiveState Recovery) slowed things down dramatically.

I googled on the key words you supplied and found this article (Note: I
would not use any registry cleaners as they can cause more problems then
they solve)!
See: http://www.analogduck.com/main/explorer_hangs

JS

"Charles Law" wrote in message
...
I can now say that Windows Explorer even hangs when in Safe Mode. Note that
I do mean Windows Explorer, as distinct from the Explorer Program Manager,
even though they appear as the same process in Process Explorer. It is only
when I run Windows Explorer that the problem starts to occur.

How can that be?

Charles

"JS" @ wrote in message ...
None specific, but a number of systems have had problems with IE7, but
since auto-updates is enabled IE7 was most likely installed some time
ago.

JS

"Charles Law" wrote in message
...
Unfortunately I don't have that information as I am trying to fix this
for a friend, and auto-updates are enabled, so they probably wouldn't
know either. Is there a particular issue that you are thinking of?

Charles

"JS" @ wrote in message ...
Did you recently install IE7 by any chance?

JS

"Charles Law" wrote in message
...
Thanks, but I just picked these two entries at random. There are many
more, and I have no reason to believe that there is a problem with any
of them per se. I was just illustrating the fact that the symbols
vanished when Explorer crashed.

Charles

"JS" @ wrote in message
...
Well there certainly is not a lack of articles in MS Knowledge Base
on shlwapi.dll
http://support.microsoft.com/search/...de=s&cat=False

There are four hits when search for both DLL files at the same time:
http://support.microsoft.com/search/...de=s&cat=False

JS

"Charles Law" wrote in message
...
One thing I have just noticed is that when Explorer is running
properly, the symbols in the Process Explorer threads list are
shown. That is, there are entries such as

SHLWAPI.dll!Ordinal505+0x37a
BROWSEUI.dll!Ordinal138+0x7af5
...

Once Explorer has crashed, the symbols are missing, so entries look
like

!Ordinal505+0x37a
!Ordinal138+0x7af5
...

The only entries still to have a symbol are

ntdll.dll!RtlQueueWorkItem+0x2b5
ntdll.dll!RtlDowncaseUnicodeString+0x75
...

I don't know if that helps at all.

Charles

"JS" @ wrote in message
...
Once you have removed 'All traces' of F-Secure then I would take
another look using Process Explorer. The CPU graph at the top might
give you some help (move the mouse cursor over any spike in the
graph for locating what cause the CPU usage spike).

JS

"Charles Law" wrote in message
...
Hard to say. It's not a product I am really familiar with. There
are umpteen things that get loaded at start-up, and I haven't a
clue what they all do. In order to get some response from the
machine I disable them all.

I've got to the point now where I am fairly satisfied that
F-Secure is my 'slow-down' problem, so I might well ditch it and
go with something like AVG.

What is now more worrying is that Explorer hangs regularly, and
although I can restart it I can't go on like this. I need to home
in on what is pulling it down, but this is proving far less
straightforward.

Do you have any techniques that would be useful here?

Thanks.

Charles

"JS" @ wrote in message
...
Does F-secure have a background task that monitors disk and
process activity and if so could this slow the PC down?
Also do you have any other AV/Spyware software running at the
same time as F-Secure?

JS

"Charles Law" wrote in message
...
Hi JS

Thanks for replying. I have Process Explorer, but one problem is
that with F-Secure enabled the machine runs so slowly that I
cannot run any application, not even Process Explorer.

When I disable F-Secure I can run PE but there is nothing using
much CPU. Idle is around 85-90%. I still get the Explorer hang
though. Each time I can restart it with Task Manager, but I
can't find out what is hanging it.

Charles

"JS" @ wrote in message
...
You need to find the specific sub-process or application
running under Explorer that's taking all
the CPU resources and slowing down your PC.

To do this try Process Explorer:
http://www.microsoft.com/technet/sys...sExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and
'Show Lower Pane' options.
Then expand the process named 'Explorer' (click on the + sign)
In the column on the left named 'CPU', look for any high CPU
usage.
Next click on the CPU column to sort the processes by %CPU
usage (Highest to Lowest).
Then click on the process that's using most or all the CPU %
the highlight it,
Now that it's highlighted, right click and from the options
listed select: Search Online
This should display what out there on the web about that
process.
You can also double click on any process to open up a more
detailed 'Properties' window.

Note: some entries like Explorer and System/Services may need
to be expanded to show the detail,
(sub processes), in this case click on the + located to the
left of the entry.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

"Charles Law" wrote in message
...
I know this is going to be a long shot, but any pointers
greatly received.

I have a Windows XP Home machine running F-Secure anti-virus.
When it boots it logs in to Windows and then runs so slowly
that it appears to have frozen. If I boot into Safe Mode I can
see that F-Secure has been madly logging to the Application
Event Log: Event 103 - "One of the scanners could not scan
because the definition database was not available at this
time; scanning passed to the next scanner."

I have Googled for this but no helpful hits.

The System Event Log also contains events from F-Secure
Gatekeeper, reporting a problem with TNBUtil.exe (what ever
that is).

I restart in Diagnostic Mode using MSConfig, and all seems to
run smoothly, except that, within a couple of minutes the
machine appears to stop working. I can Ctrl+Alt+Del to get
Task Manager and I see that Explorer has stopped responding. I
end task, and things come back to life, and thereafter the
machine runs sweetly, albeit most drivers are not loaded and
services are disabled. [Having said that, I just noticed that
Explorer hung again, but I ended the task and it came back to
life again]

Can anyone suggest a way to get to the bottom of this?

TIA

Charles

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode