Doug
-----Original Message-----
From: Doug White [mailto:[EMAIL PROTECTED]
Sent: Friday, April 16, 2004 7:33 PM
To: CF-Talk
Subject: Re: Latest Windows Updates
Bryan;
In the resource kit is a tool called "tlist" (for task list)
tlist -t
<Quote>
C:\Test>tlist -t
System Process (0)
System (8)
SMSS.EXE (196)
CSRSS.EXE (220)
WINLOGON.EXE (216) NetDDE Agent
SERVICES.EXE (268)
svchost.exe (460)
Playlist.exe (1404) OleMainThreadWndName
spoolsv.exe (488)
msdtc.exe (516)
DefWatch.exe (620)
svchost.exe (636)
Rtvscan.exe (668) Scan
nvsvc32.exe (728)
regsvc.exe (748)
mstask.exe (776) SYSTEM AGENT COM WINDOW
WinMgmt.exe (800)
dfssvc.exe (900)
LSASS.EXE (280)
TASKMGR.EXE (1832) Windows Task Manager
explorer.exe (1184) Program Manager
VPTray.exe (1228) Symantec AntiVirus Corporate Edition
projselector.ex (1252) Roxio Easy CD & DVD Creator Home
DrgToDsc.exe (1268) DrgToDsc
RxMon.exe (1132) RxMonSysTrayWnd
AcroTray.exe (1324) AcrobatTrayIcon
NaturalColorLoa (1360)
WZQKPICK.EXE (1392) About WinZip Quick Pick
UEDIT32.EXE (1320) UltraEdit-32 - [A:\Reply]
CMD.EXE (1316) C:\WINNT\system32\cmd.exe - tlist -t
mmc.exe (1852) Services
tlist.exe (1760)
IEXPLORE.EXE (1912) Error - Microsoft Internet Explorer
Eudora.exe (1848) Eudora
Icq.exe (1428) 2775689
<End Quote>
You can see by the "indent" that as SYSTEM starts, it fires up SMSS which
in turn starts other services CSRSS then Winlogin on down. Generally
anything that gets started as a "Service" is started under the SYSTEM
context (Services.msc). You can recognize Symantec Antivirus under services.
Till you get to Explorer and then you see the things that "Depend" on
Explorer etc...
So generally, one of the items in that list if what is causing the problem,
whether it is having a problem "starting" or there is a messed "dependency."
Try restarting in the "Safe Mode" and see if you still have the same problem.
In troubleshooting something like this another tool comes to mind (from the
Resource Kit) called KILL which will allow you to kill a process by PID or
by Name.
<Quote>
C:\Test>kill /?
Microsoft (R) Windows NT (TM) Version 3.5 KILL
Copyright (C) 1994-1998 Microsoft Corp. All rights reserved
usage: KILL [options] <<pid> | <pattern>>*
[options]:
-f Force process kill
<pid>
This is the process id for the task
to be killed. Use TLIST to get a
valid pid
<pattern>
The pattern can be a complete task
name or a regular _expression_ pattern
to use as a match. Kill matches the
supplied pattern against the task names
and the window titles.
<End Quote>
Last but not least is the utility called "Qfecheck" which will tell you
that an item in the Hotfix/Patch did not extract correctly (for whatever
reason) so that you would know to uninstall and reinstall the appropriate
Hotfix.
Frequently asked questions :Tool and Patch Available to correct Hotfix
Packaging Anomalies
http://www.microsoft.com/technet/security/bulletin/fq01-005.mspx
Where to get it for 2000/XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;282784
Doug
======================================
We can get rid of spam on your domain! , Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
----- Original Message -----
From: Bryan Stevenson
To: CF-Talk
Sent: Friday, April 16, 2004 4:46 PM
Subject: Re: Latest Windows Updates
Thanks Mark...but it's all solved now (removed updates while in safe mode).
I did try that, but there was only 1 profile to pick from and it sure didn't
work ;-)
Cheers
Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]
---------------------------------------------------------
Macromedia Associate Partner
www.macromedia.com
---------------------------------------------------------
Vancouver Island ColdFusion Users Group
Founder & Director
www.cfug-vancouverisland.com
----- Original Message -----
From: Mark A. Kruger - CFG
To: CF-Talk
Sent: Friday, April 16, 2004 2:37 PM
Subject: RE: Latest Windows Updates
Bryan,
Reboot and hit f8 - then choose "last known good configuration" from the
screen - you may need to do this once or twice.
-Mark
-----Original Message-----
From: Bryan Stevenson [mailto:[EMAIL PROTECTED]
Sent: Friday, April 16, 2004 2:01 PM
To: CF-Talk
Subject: Re: Latest Windows Updates
I don't know what I'm trying to do at this point. The system resources
are all used up so I can't really do anything
(hell the desktop icons and taskbars vanished).
I'll keep trying to uninstall the updates.
Of course we have backups of all our work...but there is a hell of a lot
of configuring to do to get it back up and
running if I format c:\ Time to get Ghost ;-)
Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]
---------------------------------------------------------
Macromedia Associate Partner
www.macromedia.com
---------------------------------------------------------
Vancouver Island ColdFusion Users Group
Founder & Director
www.cfug-vancouverisland.com
----- Original Message -----
From: Turetsky, Seth
To: CF-Talk
Sent: Friday, April 16, 2004 11:52 AM
Subject: RE: Latest Windows Updates
So, you are trying to stop McAffee? I would think you could remove it
from
the registry(in the Run area) then reboot, right?
-----Original Message-----
From: Bryan Stevenson [mailto:[EMAIL PROTECTED]
Sent: Friday, April 16, 2004 2:44 PM
To: CF-Talk
Subject: Re: Latest Windows Updates
Arrrrghhhhh.....I try and end processes running under the "System"
username
and all I get is access denied!!! I'm in as the Administrator!!!
It's just getting worse....now CPU is done to 2-4% but anything I try
and run
says "can't be done...not enough resources" and RAM is in good shape!!!
If I could just get Add/Remove Programs to run I could uninstal the
updates
from yesterday...but NOOOooOOoo
Oh well.....time to go find a nice quiet place to shoot myself ;-)
Cheers
Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]
---------------------------------------------------------
Macromedia Associate Partner
www.macromedia.com
---------------------------------------------------------
Vancouver Island ColdFusion Users Group
Founder & Director
www.cfug-vancouverisland.com
----- Original Message -----
From: Doug White
To: CF-Talk
Sent: Friday, April 16, 2004 11:27 AM
Subject: Re: Latest Windows Updates
Yes, As I understand, McAffee still uses a 16 bit scanning engine -
and as a
result really slows down some system. So much so, that it has caused
many
to
abandon the product for a more efficient one.
Don't hold me to this, as I abandoned McAffee back in the Win98SE days
for
that
reason
======================================
We can get rid of spam on your domain! , Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
----- Original Message -----
From: Bryan Stevenson
To: CF-Talk
Sent: Friday, April 16, 2004 11:47 AM
Subject: Re: Latest Windows Updates
Oh ya Doug...
Isn't F-PROT to do with virus scanning?? I've seen an alert about
McAfee
mabye not having all of the right stuff installed....guess that might
be
that
bad guy??
Cheers
Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]
---------------------------------------------------------
Macromedia Associate Partner
www.macromedia.com
---------------------------------------------------------
Vancouver Island ColdFusion Users Group
Founder & Director
www.cfug-vancouverisland.com
----- Original Message -----
From: Doug White
To: CF-Talk
Sent: Friday, April 16, 2004 9:32 AM
Subject: Re: Latest Windows Updates
A place to start:
Start looking for 16 bit versions of applications that are
running.
Such as
A/V
scanners, software firewalls, etc. Most running processes are
running
under a
system account, so it is time consuming to isolate the offending
application.
Next try disabling processes running under "system" one at a time
with
the
CPU
monitor running and observe which one(s) make a big difference.
Sometimes a
re-install of that particular application will do the trick, but
most
will
require upgrading to a 32 bit version of the process.
In my case, I had to update the F-PROT scan engine to a 32 bit
version
and
that
solved the runaway issue.
Good luck!
======================================
We can get rid of spam on your domain! , Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
----- Original Message -----
From: Bryan Stevenson
To: CF-Talk
Sent: Friday, April 16, 2004 10:35 AM
Subject: SOT: Latest Windows Updates
Hey All,
We applied the latest round or about 5 security updates to our
Win2K
Advanced Server yesterday and then all hell broke loose.
It now takes about 10-15 minutes to get to the desktop, then
another
15 or
so before SQL Server and a few other services get running....CF
service
never started in that time so I went in and set it to a manual
start
(trying
to free up resources).
Basically, the "System" process (not System Idle Process) is
taking up
all
the CPU time...occasionally letting go for a few seconds.
Being that the system moves SO slow it's tough to check things
to try
and
diagnose...so I'm here asking for help ;-)
Any..and I do mean ANY advice would be great
TIA
Cheers
Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]
---------------------------------------------------------
Macromedia Associate Partner
www.macromedia.com
---------------------------------------------------------
Vancouver Island ColdFusion Users Group
Founder & Director
www.cfug-vancouverisland.com
_____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
