Over 1 million tech questions and answers.

Winlogon.exe Leaking Handles

Q: Winlogon.exe Leaking Handles

Windows 2000 Server with terminal services was broken into and Administrator was compromised. Now WINLOGON.EXE processes are leaking handles and using CPU in bursts. Server must be rebooted every few hours due to exhausted memory. Does anyone have any suggestions to fix this? Thanks.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:04:27 PM, on 10/23/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\Documents and Settings\Administrator\WINDOWS\System32\smss.exe
C:\Program Files\Common Files\CA\Alert\ALERT.EXE
C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlservr.exe
C:\Program Files\Synergex\SynergyDE\dbl\bin\synd.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\VERITAS\VxUpdate\VxTaskbarMgr.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\PlanetPress Suite 3\PlanetPress Watch\Ppwcfg.exe
C:\Program Files\PlanetPress Suite 3\PlanetPress Watch\Ppwatch3.exe
C:\Program Files\PlanetPress Suite 3\PlanetPress\ppress3.exe
C:\Program Files\PlanetPress Suite 3\PlanetPress Image\PPIMAGE3.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\System32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\System32\blank.htm
F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [VxTaskbarMgr] C:\Program Files\VERITAS\VxUpdate\VxTaskbarMgr.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKUS\S-1-5-21-2025429265-606747145-1801674531-1121\..\Run: [] (User 'John')
O4 - HKUS\S-1-5-21-2025429265-606747145-1801674531-1122\..\Run: [] (User 'pete f')
O4 - HKUS\S-1-5-21-2025429265-606747145-1801674531-1130\..\Run: [] (User 'Spare1')
O4 - HKUS\S-1-5-21-2025429265-606747145-1801674531-1131\..\Run: [] (User 'Spare2')
O4 - HKUS\S-1-5-21-2025429265-606747145-1801674531-1138\..\Run: [] (User 'Dan')
O4 - HKUS\S-1-5-21-2025429265-606747145-1801674531-1139\..\Run: [] (User 'Cindy')
O4 - HKUS\.DEFAULT\..\Run: [] (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O10 - Broken Internet access because of LSP provider 'c:\documents and settings\administrator\windows\system32\rnr20.dll' missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = kareagle.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{B850F91E-1A2B-44E1-8ED0-103CB20BD9E2}: NameServer =
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = kareagle.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = kareagle.local
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = kareagle.local
O18 - Protocol: hpapp - {24F45006-5BD9-41B7-9BD9-5F8921C8EBD1} - C:\Program Files\Compaq\Cpqacuxe\Bin\hpapp.dll
O20 - Winlogon Notify: helpsvr - C:\WINNT\System32\Sysem.dll
O23 - Service: Alert Notification Server - Computer Associates International, Inc. - C:\Program Files\Common Files\CA\Alert\ALERT.EXE
O23 - Service: Backup Exec Remote Agent for Windows Servers (BackupExecAgentAccelerator) - Symantec Corporation - C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe
O23 - Service: Backup Exec Agent Browser (BackupExecAgentBrowser) - Symantec Corporation - C:\Program Files\VERITAS\Backup Exec\NT\benetns.exe
O23 - Service: Backup Exec Device & Media Service (BackupExecDeviceMediaService) - Symantec Corporation - C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr.exe
O23 - Service: Backup Exec Job Engine (BackupExecJobEngine) - Symantec Corporation - C:\Program Files\VERITAS\Backup Exec\NT\bengine.exe
O23 - Service: Backup Exec Server (BackupExecRPCService) - Symantec Corporation - C:\Program Files\VERITAS\Backup Exec\NT\beserver.exe
O23 - Service: CA License Client (CA_LIC_CLNT) - Unknown owner - C:\CA_LIC\lic98rmt.exe (file missing)
O23 - Service: CA License Server (CA_LIC_SRVR) - Unknown owner - C:\CA_LIC\lic98rmtd.exe (file missing)
O23 - Service: HP ProLiant Remote Monitor Service (CpqRcmc) - Hewlett-Packard Company - C:\WINNT\system32\CpqRcmc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Synergy/DE License Manager (SynLM) - Synergex - C:\Program Files\Synergex\SynergyDE\dbl\bin\synd.exe
O23 - Service: Synergy/DE xfServer (SynSrv) - Synergex - C:\Program Files\Synergex\SynergyDE\dbl\bin\rsynd.exe
O23 - Service: HP ProLiant System Shutdown Service (sysdown) - Compaq Computer Corporation - C:\WINNT\system32\sysdown.exe
O23 - Service: HP System Management Homepage (SysMgmtHp) - Hewlett-Packard Company - C:\hp\hpsmh\bin\smhstart.exe
O23 - Service: Yahoo Services (YS) - Unknown owner - C:\WINNT\system32\yahoo.exe

End of file - 9159 bytes

Preferred Solution: Winlogon.exe Leaking Handles

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Winlogon.exe Leaking Handles

Hi Kevin,Looks like a mess. My suggestion, reinstall. I know that is a major pita when it comes to Terminal Services and setting up all the apps again, but with a hack you never know what they did. Can we clean up all the running malware, yes, but we will not be able to tell if any policy changes have been made, registry settings that lower your sam account enumeration, etc etc. So with all of that said, I seriously suggest you reinstall.If on the other hand, you want me to move forward and help you clean up the machine, I will be more than happy to.Regardless of what you do, do me a favor and submit a file for me.This file :C:\WINNT\system32\yahoo.exePlease submit it at http://www.bleepingcomputer.com/submit-malware.php?channel=3Just a note, if you want to do this right, you will have to disable terminal services while we fix it as the users logged on will make it difficult to properly clean. Also it is going to be nigh impossible to make sure that you do not get reinfected from programs running on other users profiles. I am willing to give it a try though. Up to you.

Read other 3 answers

I noticed yesterday extreme handle usage on my system, over 120k handles, of which 80k were due to lsass.exe which is a unkillable process. The security accounts manager service is not stoppable also which uses lsass.exe.

Today after I rebooted I see its not a one off problem and its leaking handles again. Seems about 1k handles per hour.

I dont fancy rebooting every few days (previously I rebooted once a month for updates).

any idea how to solve this without reinstallng the OS.

right now it seems the most likely cause is a recent windows update I installed.

A:lsass,exe leaking resources (handles)

right now it seems the most likely cause is a recent windows update I installed.

Seems like you answered your own question.

If you have the means, I'd make an image backup of the current state of the machine, then roll back the update if possible.

Read other 1 answers

OK, here goes...

Today I noticed my pc was leaking data at a constant rate to the internet while my CPU usuage was also randomly spiking. I use Zonealarm Pro(with Windows XP Pro) and after fiddling with the settings I think I ended up being able to largely stop it. What I'm seeing is as soon as I start up the pc I get an alert asking whether I want:

To allow Windows NT Logon Application to use Messenger to act as a server
Application: winlogon.exe
Version 5.1.2600.1106 (xpsp1.020828-1920)


To allow Services and Controller app to use Generic Host Process for Win32 Services to act as a server
Application: services.exe
Version 5.1.2600.0 (xpclient.010817-1148)

When I deny these access I get many attempts at an outbound connection which Zonealarm logs as Advanced Progam Access. So far today there have been several thousands outward attempts - over 1100 in one set.

(I'm not sure what the forums policy on issuing other ip addresses is but if I'm in the wrong tell me and I'll remove them or otherwise if a moderator could do the same courtesy)

They have tried sending to IP addresses: Typically Port 53 - This is where the really large numbers of attempts are made. Also Zonealarm log shows the same IP address making incoming attempts to generic host process. From my limited whois check I came up with cache1.ntli.net but as a newbie have little knowledge.
Other ip addresses attempts have been made to: - typically ... Read more

A:PC leaking data.. poss winlogon.exe hijack?

I don't see anything really suspicious in this log file. Go to the bottom of this message to get the latest version of HijackThis. If the site is down, you can also get it here.

Run an online virus scan at TrendMicro or RAV Antivirus. Select the Autoclean option if you use TrendMicro.

After that's done, restart and post a new HijackThis log file.

Read other 1 answers

I had left my computer on, and went to bed; it had went to sleep evetually; when i awoke, tried to log back in to my account and i got the error  "The reference account is currently locked out and may not be logged into". The internet was
disabled and disconnected at the hardware level during this timeframe. Every time this takes place, upon boot Event viewer shows the following:

The following boot-start or system-start driver(s) failed to load:

This is the third time this has happened this week; another PC on the network also had a problem and was booted into a clean defaulted temporary account at logon; Also, this occurred as I am writing this again; I am no longer able to access anything that requires
administrative privileges. I am told that the lock out occurs due to password lockout policy, which I have enabled; Once I had did a system restore, and restored access to my desktop, I had immediately changed the passwords of my two admin accounts; and within
20-30 minutes the lock had re-appeared; and all while the computer was unplugged from the internet, cable and all. So if this were a hacking attempt; it would have to be by a pre-installed rootkit;  Winlogon is clean according to virus-total. Anyone know
whats going on and how to fix this issue? Typically these errors are due to NON windows apps and services, like anti-virus; P... Read more

Read other answers

Hello Sir,

Yesterday, my HDD broke down and I had changed new HDD and got new XP installed.
When I tried Windows Update, I got the message " you may be a victum of counterfeit XP" everytime I turn on my notebook. Anyway I still can use it with the option "resolve it later" but when I turn off, it doesn't turn off for an hour and I have to turn of by pressing power button all the time now.

I'm a seaman without computer knowledge and I'm now stuck in a hotel waiting to join ship and I can't even go back to the computer shop where I changed my HDD and new XP.
One of my friends advised me to check virus with free Kaspersky software online and I found any sign of viruses.

So, you are my only hope to solve my problem now.
Please help me.
Thanks in advance.

Troubled user.

A:winlogon.exe encountered a problem and needed to close. Error signature : szAppName:winlogon.exe szAppVer0.0.0.0 szModName:n...

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers

I have 8 GB of ram and now I am having memory leaks that occur after a couple hours, at the moment from sitting on idle for about 15 minutes, my memory usage went up by 5 ish percent and didnt come back down. How can I fix this, I am using Windows 10 64 bit.

A:Ram Leaking?

Have you checked Task Manager and looked at the "Process" tab? All the basic info that's taking up Disk, Memory, CPU, etc. usage is displayed there.

Open it up by pressing Ctrl, Shift and Esc together, then click the "Process" tab, then click "Memory" and it will sort everything by "Using the most". Does it display the name of the process?

Read other 2 answers

a leaking capacitor = dying cpu ?
Is it true?
i heard that it is a hardware problem in which the battery shaped thingys are bulging out and eventually something happens.
but i dont understand what is this something and what are the possible failures of a cpu with a leaking capacitor?
Thank you in advance!

A:Leaking Capacitor

Leaking capacitor = dying motherboard. (If the capacitor is on the motherboard!)The larger capacitors on the motherboard are there to provide voltage stabilization and/or isolation. If they fail and start to become electrically conductive they begin to get hot and this can result in the dielectric paste boiling and venting out of the 'can'. Because they have not been working correctly this may mean components (including the CPU) have received incorrect voltages and thus become damaged but it is not certain.If you have a motherboard with leaking or bulging capacitors then it needs replacement.

Read other 3 answers

I'm having real trouble, for some reason my memory seems to be leaking away and I can't seem to start zonealarm or run kaspersky properly, ZA won't start and Kaspersky seems to crash part way through scanning. Is there anything in this HJT log that might be causing this???

thanks as always!!

Logfile of HijackThis v1.99.1
Scan saved at 10:51:58, on 10/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\Program Files\Windows Defender\MsMpEng.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tv.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://update.zonelabs.com/downloadr...tReqId=6112439
O1 - H... Read more

Read other answers

Obviously my screen can be broadcast to someone engaged in surveillance, given access and time (and the right equipment and parts. Does anyone have any information on where I can figure out how this is done, or at least get a snapshot of what the insides look like? I would like to be able to physically open the TV and be able to know if it has been tampered with? I am one of those people who has to physically see the internet cable detached, not just powered down at the modem. Any ideas folks?

A:Is my monitor leaking?

wow... ok...
Is it a detached monitor we are talking about

Read other 9 answers

I have a client with a new lenovo laptop (not brand new) and it's running like a dog.  I tried disabling startups, services and running MWB scan to no avail.  
All the processes that are using CPU and Memory like crazy seem to be legit Windows system files, when I look them up.  
Can someone look at the HJT log and give me some advice? 
Also, I have limited access to this laptop to do troubleshooting.  Any suggestions should be detailed with steps to take and plans a,b,c,etc so I can iterate without delay when I do have access to the machine . 
Mod Edit:  Deleted replies to misplaced MRL topic, moved from Win 7 to Malware Removal Logs - Hamluis.

A:New Lenovo X1 leaking all over

thx mod

Read other 5 answers


I have installed Windows 7 Ultimate on my system. I have looked at Event Viewer.

It indicate that there is possible memory leaking.

"Possible Memory Leak. Application (C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 364) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({3f31c91e-2545-4b7b-9311-9529e8bffef6}), Method number (20). User Action: Contact your application vendor for an updated version of the application."

What is memory leaking? Is it hardware problem or just simple software problem by Microsoft?

Can this be an incremental problems store in the future that may mess up windows 7 kernal?

Thanks in advance and happy new year.


A:Possible memory leaking

Go to search and look for memory diagnostic test and then report back. Using the task manager make sure that all your ram is utilized. Check the performance monitor. Check for virus

Read other 4 answers


Does anyone own a Dell Vostro 200 Slim Tower that has a PSU leaking? We have a batch of Dell Vostro 200 Slim Tower. Viewing from where the power plug in, we can see that a lot of capacitor seems to have leak to the coil. I'm very surprised that these computers are still working. I'm wondering if it is normal.

Hopefully, someone can shed some light.

Read other answers

I'm using FF 47. I refuse all cookies except for those I add to the FF whitelist. I also use the self-destructing cookies add on. I also use the Better Privacy add on and destroy all LSO cookies on exit (except for FP settings).

This has always worked well, but lately, CCleaner has been showing cookies that aren't whitelisted. In fact, I can go into the FF whitelist and specifically blacklist these cookies and they still appear. And they don't get removed when I close the browser.This doesn't seem to confine itself to any particular site. Cookies from some some sites not on the whitelist are accepted and some are not.

It's very inconsistent. Has anyone had these type of issues?


Edit: These coolies show up in CCleaner after FF closes, but they don't show up in the FF's 'Show Cookies' list. So maybe it's CCleaner?

A:Firefox leaking cookies?

I use Self Destructing Cookies and was using Better Privacy but unless you've got the latest version of Better Privacy - it dowsn't work. Anyway I ditched Better Privacy and now use this for LSO cookies:

Click&Clean | Add-on for Firefox

Plus DOM Storage is disabled and cookie settings are set to reject third party cookies and clear when browser closes.

Read other 5 answers

What a pain in the *** this is. Iím working on my brother in-laws computer. The problem he was having is the system was restarting on its own. I thought right away, RAM! Swapped it out, still restarting. Check the power supply, processor fan, all working well. Swapped out the HDD, still having the problem. Then as I was looking in the case, there it was, bold as brass, four swollen capacitors up by the processor. They are just starting to leak through the tops. Now itís all making sense. Itís a MSI motherboard, model MS-6309 and its just 2 months out of warranty!! I e-mailed MSI with a firm pointed request that they stand by their product and replace this board. What do you think my chances are? I did a search on the net and found that this isnít just narrowed on MSI, but most main manufacturers, So much for quality parts. Who ells is running into this?


A:Swollen and Leaking Capacitors

Read other 12 answers

I'm going to take my printer (Epson C-80 with black, yellow, red, blue cartidges) into the bathroom to clean up a pool of black ink that I see has spilled in there and is causing pages to emerge streaked with wet black ink. Then I'll replace the black cartidge and hope for the best. Is water okay to clean it with? Water and paper towels? Is there a solvent I should get? I'm hoping this one inkpool is all there is, because I can't take this apart to clean anything deeper inside it.

A:Printer leaking ink inside

Read other 6 answers

Hello, a few days ago I noticed a strange smell coming from my PSU (replacement nr HP 416535-001), so I immediately shut the PC down in order to find the problem. The smell clearly came from my power supply but I couldn't see anything odd like damaged capacitors and the PC still boots and works normally. However I wasn't comfortable with the smell so I decided to take apart an old psu I had laying around to see what the problem might be. The old PSU smelled very similar if not exactly the same when I took the fan apart and smelled under the sticker covering the oil of the fan, some oil had also leaked a little. So I'm not sure what to do now on the HP PSU, open it up and replace the oil? I hope it isn't leaking, I don't know what that could possibly do. I can't see anything leaking but I haven't inspected the back of the fan because I can't see it without opening it first. Taking it to a PC store would be dumb because that would probably cost more money than the whole PC coated me. The PSU is very old just like the whole system so warranty doesn't apply.Has anyone else reported this problem and what's best for me to do? Thanks in advance.

Read other answers

So I went to sleep last night and left my computer on, knowingly, and when I woke up, my computer was off. I turned it back on to set a few programs up, then it crashed a few minutes later.

The computer boots just fine. After I got home, I turned the computer back on, and it stayed on for half an hour. Again, it starts up fine, but crashes later on.

After I unplugged everything from it, I moved it and saw a puddle under it... of water or cooling fluid. Opened the case, looked at the bottom and saw a little bit of fluid around the power supply.

Everything else looks dry; if anything got wet, then the computer wouldn't be working right? Everything loaded up fine,so I assume there was no damage other than the power supply. It wasn't very wet, but there was a good amount on the bottom.

How did my cooling system break? Since my computer crashes (no viruses) is my power supply broken?

A few things..
-I wouldn't doubt if the computer was way too overheated..
-I leave my computer on 24/7 for a program to run (a bot for a game) which runs with java
-My computer hasn't been turned off in.. 2 months? Around there, the computer is busy 24/7.

It's somewhat obvious, but does a leak normally happen from the situation I am in? How do I fix this, and how much does this generally cost?
TL;DR Ran computer 2 months straight 24/7, comp leaks, turn comp on then it crashes 5-30 mins later, wut do?
I have:
-NZXT 120mm watercooler with 120mm fan
-Black Coolermaster HAF912 mid no power... Read more

A:My computer is leaking... then crashes?

water and electronics do not mix well... the leaking water could have easily caused a short, that could in turn crash your computer. If you are fortunate enough that your computer isnt broken, remove the water and replace the leaking coolant system...

Read other 3 answers

I recently have been getting warnig messages preceeding a pop-up. I would see the the windows messaging window saying my computer may be at risk. I would close the box and another similar would pop up and I would close and it would redirect me to the "winfix pro 2007" website. Many times Norton would open up and say a downloader has been blocked. All scans were clean no threats. I ran atribune vundofix and it could not get rid of windows\system32\mljjkii.dll. HJT shows a search indexer entry. Any help please?

Logfile of HijackThis v1.99.1
Scan saved at 2:54:45 PM, on 10/22/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Yahoo!\browser\yb... Read more

Read other answers

I was under the impression that the firewall inside KIS2009 is leakproof and could block all kinds of threats.

It was leaking a bit! Now check out your firewalls using Gibson's Leak Test: http://www.grc.com/lt/leaktest.htm

Best of luck

A:Is your firewall leaking? Test it!

Read other 14 answers

The add on WebRTC Block for chrome is not longer working. 
Does anybody know how to disable WebRTC on Chrome in any other way?
I switched to the latest Chrome 43 beta version, hoping that I could disable it on chrome://flags.
Unfortunately that option is still grayed out, only available for Chrome android platform.

A:Chrome WebRTC leaking IP when using VPN

I use WebRTC Block on Iron (a Chrome based browser) and it works perfect !
You can test WebRTC leaks here.

Read other 21 answers

I have been plagued with memory related problems, running WinXP Pro on an Abit KA7-100 mobo with an Athlon 700 CPU.

On boot I receive the following message :

"Windows NT has not found enough extended memory.
7Mb of extended memory is required to run Windows NT.
You may need to upgrade your computer or run a configuration program provided by the manufacturer.

Memory Map :
00000000-000A0000 - 000A0000-00100000 "

I have 512 MB of SDRAM fitted in SIMM bank 1.
I have rechecked that it is correctly installed.

On inspection I notice that there is brown 'goo' on the board close to a capacitor and it appears that it has contaminated the SIMM slot.

I have two questions :

1. Is the board a write off ?

2. I have a new WD 80GB HDD fitted. Am I able to put this in a new PC that I am currently assembling ? And be able to use it ?

I shall be loading WIN XP Pro on the new machine.

Any advice much appreciated.

A:Abit KA7-100 ..... Leaking capacitor

Read other 12 answers

One of my svchost processes it leaking memory pretty badly. It eats through almost two gigs of RAM in about as many days. The particular svchost that has the problem seems to be one that runs a lot of services including some of the very low level Windows and COM services. I've tried disabling the ones that I though were safe to disable but I can't seem to isolate the one that is causing the leak. It's been suggested that this may be a virus so I thought I would post a log to see if anyone had any thoughts. Thanks very much for the help.

I'm running Windows XP Pro SP 2. I have attached a listing of the services running under the svchost that is leaking (I got the listing using the procexp.exe tool).


Deckard's System Scanner v20071014.68
Run by davidl on 2007-12-07 12:20:03
Computer is in Normal Mode.

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
59: 2007-12-07 18:20:11 UTC - RP1005 - Deckard's System Scanner Restore Point
58: 2007-12-07 15:57:00 UTC - RP1004 - Installed Windows Internet Explorer 7.
57: 2007-12-07 15:55:47 UTC - RP1003 - Installed Windows IDNMitigationAPIs.
56: 2007-12-07 15:55:20 UTC - RP1002 - Installed Windows NLSDownlevelMapping.
55: 2007-12-07 15:54:48 UTC - RP1001 - Installed Windows XP KB915865.

-- Firs... Read more

A:svchost process leaking memory


Read other 1 answers


We have a 1 year old PC that's been running daily for the last 3 months @ 8-10 hours per day.

It has recently started giving a CPU temp overheating warning on booting.

We opened the case and found that some thermal paste appeared to have leaked from the CPU fan (see photo) Is this a sign that the cabinet it's in is not cool enough or that the thermal paste needs replacing?

Can anyone say what the solution is?

Specs below!

Thanks in advance!


∑ Processor: Intel i7, 2.2 GHz
∑ Memory: 16GB
∑ Hard Drive: 60GB required
∑ OS: Windows 7, Home Premium
∑ Motherboard: Asus P8Z68V Pro-Gen3
∑ Bus: 2 x PCIe 2 16 slots
∑ GPU/Graphics: 2 x ATi FirePro GL V7900 quad-head graphics cards

A:CPU - leaking thermal paste and overheating

I can't seem to see the thermal paste in the picture but, nevertheless:

I would think that the thermal paste was not applied correctly in the first place, likely with too much being used.

I would be immediately removing the CPU cooler and re-applying the paste. Here's a tutorial if you need help:

Make sure there's no damage to the block before re-applying the past, however.

Read other 8 answers

Hi guys! I'm looking for a solution to two problems that I've been having with my Y50 laptop: Firstly and most importantly, I'm getting frustrated because my laptop freezes when I play games (specifically League of Legends and Hearthstone). I had purchased my Y50 as a pretty decent gaming laptop and so when this started happening more frequently, I got pretty upset. If anyone could please suggest any fixes, please please please do.  Secondly, I'm having audio problems with people being able to hear what sounds are playing on my computer when in Discord or Skype. I realize that this might not be a Y50 specific problem but I figured I might as well ask here anyhow. Cheers! Thanks in advance. 

Read other answers

I bought an HP (a6720y) desktop the other day with Vista installed.

Here's what my harddrive stats looked like the day I got it....

Here's what it looks like now.....

I've gone from 548.80 GB to 534 GB of free space in just a coupel days.

The thing is that all I've been doing is browsing the internet, playing chess and solitiaire, I deleted some bloatware. Nothing that explains such a sharp drop in HD freespace.

A:My Harddrive is leaking freespace like crazy

Hello Rambone,

It, may the amount of disk space being used by System Restore. You can use the tutorial below to check and see how much is your MAX disk storage space is, and how to adjust this as needed.

System Restore - disk space

Hope this helps,

Read other 1 answers

This is a useful article.

"Finger-pointing and fury as manufacturers try to dodge blame

"It has all the elements of a good thriller: a stolen secret formula, bungled corporate espionage, untraceable goods, and lone wolves saving the little guy from the misdeeds of multinational corporations. In this case, a mistake in the stolen formulation of the electrolyte in a capacitor has wrecked hundreds of PCs and may wreck still more in what is an industrywide problem." -



A:Leaking capacitors muck up motherboards

That story has already been covered here ...

mobo problems beyond belief

It wasn't just PC mainboards that were affected, but other non-computer consumer electronic devices also suffered from these defective caps, though to a lesser extent

Read other 7 answers

this is a fairly new laptop from frys with waranty 

A:my glass screen is broken yet no ink is leaking its just the...

 Unfortunately, the standard warranty does not cover a cracked screen-unless you bought the extra Accidental Damage Protection.If Frys has a PC service center they can probably give you an estimate to replace screen.If not  >Contact HP

Read other 1 answers

Within the last few days, since that last time I updated my iPod, two folders of mp3s (from different artists) have just up and disappeared. I know that they existed previously, because I listened to them. They've just completely gone, but I didn't delete them, that's certain.

What on earth could have happened?

I have Windows Vista Home Premium, I use iTunes so that manages the Music folders.

A:My computer is leaking. Mysterious disappearance of files.

Read other 9 answers

My HP Photosmart 3210 All In One Print Scan Copy is about 4 1/2 years old. Today I noticed the colors it was printing were inaccurate, either too light or entirely a different color.

After some troubleshooting and several diagnostic pages/tests, the problem seemed to be too much or too little Magenta or Cyan being printed. Looking inside the printer, I saw puddles of Magenta and Cyan leading from the carraige head. When I happened to unplug the printer just as the carraige had moved to the left, I saw a large puddle of Magenta under the spot where it usually sits to the right.

Below is a link to the album on Photobucket where I uploaded pictures I took of the ink puddle. Could this reasonably be repaired, or is it one of those things that wouldn't be worth fixing?

http://s572.photobucket.com/albums/ss168/RedneckBubba19/printer leak/

Thank you.

-RB19 (Grady)

Read other answers

My trusty old ThinkPad z61m just leaked quite a puddle of clear liquid out the bottom of the laptop. Has anyone else experienced this and do any of you have any idea what it is and what could cause this. Some details. 1. It is not the battery. It died years ago and was removed then.2. It is not external spillage. I dusted it off and set it up a couple of hours ago and there is no liquid in the room.3. There is no leak from the celing or window.4. I am alone in the room and have not left it since I set up the laptop. I also do not have any pets (in case anyone googles this issue )5. I saw it when the laptop overheated and shut down. Wiped the desk and laptop clean, cleaned the coolong fan and turned the laptop on again and it seems to be running ok. I did get a tiny bit on my fingertips and they seem to be tingling a little so also curious if this is toxic and if it is safe to use the laptop.

A:ThinkPad z61m leaking clear liquid

Detach the Z61m and check the inner side including the top and bottom of the system board.
Hardware Maintenance Manual fŁr ThinkPad Z61e, Z61m, Z61p

Read other 1 answers

For the last month or so Windows 7 has been leaking memory in the audiodg process. At first I was noticing a very annoying crackle in whatever I was listening to, I found out it was caused by audiodg using too much memory. Recently it's been causing audio to cut out completely until I restart the service. It's getting unbelievably annoying and I would like to get everything fixed.

Also, don't recommend turning off enhancements. That's already done and it's still causing problems.

A:Windows 7 audiodg.exe leaking memory like crazy

Have you made sure your audio drivers are up to date? Try that, if it doesn't work, use Geek Uninstaller (great little standalone app) to try and uninstall your drivers completely (wipe registry and file leftovers), restart and try installing the drivers again. You haven't specified which audio card it is, so i'm going by the assumption it's a random integrated one from Realtek.

EDIT: Yeah, just did a quick search for your MOBO. Go here and download a fresh copy of your audio drivers. First figure out which revision of the card is it - there's rev 1.0, rev 1.1 and rev 3.0
Don't really know how to help you with that, though, sorry.

Read other 6 answers

I have a clickfree backup #HD1037NSE on vista upgraded to 7, 64bit. I am showing a handles leak in the 65,000 range and rising in task manager. The promo for clickfree says that it has 207 handles. My windows memory diagnostic pointed this out, and I have been looking fruitlessly for an answer, as to what it means, for hours. Can anyone tell me what is going on???

Looking for info???????

Read other answers

Hello, Im not sure if this is in the right category. but here we go. For about a week now strange notifications from Norton have started popping up stating that a certain program is using 100% of one CPU (i.e today it said Photo Frame was the culprit) also it said that a file or something was using 1,074,000 handles, which is INSANE! Im not sure about the program or file though So next time it pops up ill write it down.

So, I am a little bit worried what is causing this all of a sudden, hopefully not a virus or something of that matter.



Tech Support Guy System Info Utility version
OS Version: Microsoft Windows 7 Home Premium , Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz, Intel64 Family 6 Model 30 Stepping 5
Processor Count: 8
RAM: 16343 Mb
Graphics Card: ATI Radeon HD 5800 Series , 1024 Mb
Hard Drives: C: Total - 1414312 MB, Free - 1301382 MB;
Motherboard: Gateway, H57M01, , U01N100500384
Antivirus: Norton Internet Security, Updated and Enabled

Read other answers

anyone come across something like this before? (the Handles)

A:cpu performance and handles

Sure we all have this, different numbers on each PC. Having an issue ? Do have a lot of processes running 146.
A process is basically just programs that are running. A thread is the entity within a process that can be scheduled for execution.

Handle (computing) - Wikipedia, the free encyclopedia If understand this.

Read other 10 answers

Hi all,

So the issue I'm having started occurring in July this year and it is this: after leaving my PC running for about 3-4 days without a reboot, I noticed that one of the svchost.exe processes was hogging a large amount of memory (about 2,4GB). Using the instructions fromthis page I separated out the services running under this single process into separate svchost processes, rebooted and left my PC on for another 3 days.

The same symptoms occurred in terms of high memory usage and the offending service is called "nsi" or Network Store Interface.

I've been troubleshooting this issue for a while now and am not sure how to tell what is causing this service to consume such high memory. If anyone can help me solve this I'd be grateful.

My PC's spec:

Tech Support Guy System Info Utility version
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: AMD Athlon(tm) II X4 620 Processor, AMD64 Family 16 Model 5 Stepping 2
Processor Count: 4
RAM: 4095 Mb
Graphics Card: AMD Radeon HD 7800 Series, -2048 Mb
Hard Drives: C: Total - 241326 MB, Free - 84060 MB; D: Total - 476937 MB, Free - 401302 MB; E: Total - 78159 MB, Free - 67740 MB;
Motherboard: ASUSTeK Computer INC., M2N68-AM SE2
Antivirus: Microsoft Security Essentials, Updated and Enabled

I've attached screenshots of the process and service.

This is my first post so let me know any info that I've left out which would be useful.


Read other answers

There has been a lot of buzz around this week about a "new" exploit ( 20+ years old) that leaks your Microsoft account credentials.

If you use a Pro or enterprise version of W8 or W10 than there are settings to cure this. Users of W8/W10 Home cannot and are at risk


A:Microsoft Live Account Credentials Leaking From Windows 8

Read other 7 answers

After going into a government website site I found that the layout of toolbars had changed.

First, there was just one line, each section being short of items on display (only be accessible by clicking an arrow).

Second, there were no handles to rearrange into two or more lines, which presumably would enable all icons to show.

Thirdly, I had text descrptions against icons. But they have vanished, and when I click the Size Icone / Customise the option to add text to icons is greyed out.

I have tried eveything, included re-starting, but to no avail.

Can anyone help with this please? Thanks.

A:Lost handles on toolbars

Following my original posting, the problem has mostly been resolved, In the course of 'clicking everything' I clicked on the maximise button - the display size reduced and I dragged it back to full size. -Everything but one thing was back to normal! Huge sigh of relief.

However, there is still one mystery - the handles on the toolbar are still missing. Any ideas?

Read other 1 answers

I have a VB 6 app that runs fine for about a week, then comes to a halt with a message "unable to allocate image handles".

This seems to me like I have used all the available graphics handles. Any ideas on what I could be doing that is eating handles.

The program cycles one per second, and had several picture controls with a background image, and vb shape lines on top.

Read other answers

I have searched and searched and can not find out to create movable rectangles with handles. i know how to create movable polygons with handles. i have trouble when it comes to keeping the corners and sides correct angles and lengths.

A:Moving rectangles with handles in VB6

Are you talking about at run-time? And if so, what code are you moving your polygons with?

Read other 1 answers

Okay, Spy Sweeper prompted me to install the newer build, so I did. I used to only have 8000 handles on start up, now I have 15,000. Could it be because the newer build requires more to function? Just curious.

A:Quick Questions about Handles

As long as computer performance is not an issue and you are clean of malware/viruses etc then its not an issue.

Read other 1 answers

When I have a frame or image in Word 97, it will only resize vertically. Using the other handles makes the image go the size of the entire screen. Also you can only drag images to the left, center, or right side of the screen.
Thanks for any help

A:resizing handles Word 97

Try this, Snow, but I'm not promising anything. Cut the picture. Hit Edit-Paste special and select Picture. Now try resizing. If you can't resize it that way, right-click the picture and hit Format picture. Go to the size tab and try it that way. You should lock the ratio first.

Brainbench MVP for Microsoft Word

Read other 1 answers

I am having a user with a problem accessing a file over a windows share to a server. He has the file open in Excel and is using it, leaves Excel open for some considerable amount of time and then when he goes to do some more work and save it he gets an error about lost writes.

The Yellow popup box in the system tray says:

Windows - Delayed Write Failed
Windows was unable to save all the data for the file \\servername\e\dir1\dir2\dir3\dir4\94AB7160. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere."
Simultaneously on the server while this problem is occurring I go to check the open share handles and list all the files open over the shares. The file in question that is open above is not listed, so it looks like the share handle was lost and this is possibly why the user gets the error about not being able to write to the file.

There is no problem with permissions, he can save the file locally then copy it over the file at the destination but this sort of workaround should not be necessary. He can also edit the file in place, but it seems that after leaving it a while this weird behaviour happens.

Any ideas on troubleshooting or fixing this behaviour?

Read other answers


I am trying to clean a computer that was littered with adware, trojans and a couple virusses. I believe I got most of it eliminated thanks to many tips on this site.

Machine runs stable in safe mode.

If I boot normal, the computer start slowing down immediately. I noticed that the number of handles and threads steadily go up (7000+ handles) until everything comes to a grinding halt.

I would appriciate any help with the following HJT.LOG

Logfile of HijackThis v1.99.1
Scan saved at 2:58:55 PM, on 3/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Documents and Settings\Admin\Desktop\FixXP\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.uri.edu/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_5_7_0.dll
O2 - BHO: MSW.cIExplorer - {4B57B77A-B130-4EB8-8CFB-... Read more

A:Sloooooooww (many handles and threads)

Well for one thing.. I know bearshare is not help'n.. probley dont want that on there anymore...

here are a few lines that I dont like..

O4 - HKLM\..\Run: [476k32R] shuca.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [sctdaa] c:\windows\system32\sctdaa.exe
O4 - HKCU\..\Run: [LwpqRSd5i] scldecod.exe

Someone may be able to shed some light on what these programs are... but they dont look too valid to me..

Read other 2 answers

So I upgraded this morning from 8.1 to 10, so far I really like it.

I am curious about how Windows 10 handles it's updates? In 8.1, I could go into control panel, and double click on windows update, and it would find any available updates ( usually defender on a daily basis) and then some routine updates usually monthly. I always preferred to select the updates I wanted to install and then install them on my own time.

Don't know that I see a way to do this in Windows 10? I did find under settings, where I could choose to only download from Microsoft and to notify me rather than automatic - does that accomplish the same thing? Will it notify me and allow me to choose the updates I want to install?

I know sometimes previously in 8.1 updates might find some hardware drivers and offer them, I always get those from my hardware vendors, don't really want to be getting those from MS.

I am sure as time goes by this will become more clear to me, just curious now more than anthing.
Thanks for any tips,

A:Question on how Win 10 handles updates?

Windows 10 is taking a different approach and bundling updates together. Also, it is automatically installing them and taking much of the user interaction away. This could be good in that security vulnerabilities are patched no matter what (so long as you are internet connected), but some see it as a suppression of choice.

There are some things you can prevent updating automatically, such as other MS products, and you can also defer upgrades till later.

In addition, you are able to select that you do not want to have device drivers install automatically (found in device installation settings).

Hope this was helpful!

Read other 1 answers

According to Task Manager

Two instances of SmartCopy.exe *32 , (1 each for 2 users logged in) have a combined total of 1.8MM File Handles open.

I can't imagine that is normal so what would cause that?

Any suggestions?

A:1.8MM File Handles Open


1) A bug in the app. They don't call CloseHandle() in appropriate places in their code due to some type of synchronisation oversight, most likely between different threads. This can only be fixed by recoding the app and removing the bug.


2) External code injected into the app is buggy and preventing the smooth closure of handles in one or more places in the app's code. This would be something like your anti-virus most likely. Uninstalling the AV temporarily would be a good thing to try.

Utilities like the (Sysinternals) "Process Explorer" and "Handle" can tell you more about the nature of those handles, and (if you've done that type of work before) attaching to the process with a debugger will give you more still. However, if this is not your code, you won't be able to fix the bugs without involvement from the vendor who sold it to you.

Good luck.

Read other 2 answers

I just bought a new PC which came with this harddrive....


Other people who have it say that it's 598 GB after format. Why is it only 582 GB for me????

A:Harddrive is leaking freespace like crazy (possibly Vista related)


Does the computer have a recovery partition?

Click Start > Run > type diskmgmt.msc

What does disk management report for the drive.

Read other 19 answers