Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

All File transfers hang. No virus!


  • Please log in to reply

#1
phickspc

phickspc

    Member

  • Member
  • PipPipPip
  • 131 posts

All file transfers hang start but then hang over esata, ssd, hdd, usb and even wifi!
That includes all of my usb ports, sata cables internal and external. I have a new phone, and I've tried transferring over wifi to see if it was a hardware connection problem. It's not!
I've also tried transferring big files, small, combination, folders , tried using teracopy too!
If I wait long enough the file transfer resumes only to hang again moments later, unless it's a small file, which still initially hangs but eventually finishes transferring.

Sometimes a file on an external drive will resume from a hang by disabling MSE real time protection and then hang again once I re-enable it.

 

OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: Intel® Core™ i7 CPU 920 @ 2.67GHz, Intel64 Family 6 Model 26 Stepping 4
Processor Count: 8
RAM: 12278 Mb
Graphics Card: NVIDIA GeForce GTX 750 Ti, -2048 Mb
Hard Drives: C: 465 GB (94 GB Free); E: 1863 GB (435 GB Free);
Motherboard: ASUSTeK Computer INC., P6T

 

Any ideas?


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,388 posts
  • MVP
 
Right click on (My) Computer and select Manage (Continue) Then click on the arrow in front of Event Viewer. Next Click on the arrow in front of Windows Logs Right click on System and Clear Log, Clear. Repeat for Application.
 
Reboot. 
 
Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).
sfc  /scannow
 
(This will check your critical system files. Does this finish without complaint?  IF it says it couldn't fix everything then:
 
Copy the next two lines:
 
findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 
notepad \windows\logs\cbs\junk.txt 
 
Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter. Copy and paste the text from notepad or if it is too big, just attach the file.)
 
 
1. Please download the Event Viewer Tool by Vino Rosso
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:
 
* System
4. Under 'Select type to list', select:
* Error
* Warning
 
 
Then use the 'Number of events' as follows:
 
 
1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.
 
 
Please post the Output log in your next reply then repeat but select Application.  (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

  • 0

#3
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

Thanks for offering to help RKinner.

SFC no errors found.

VEW take 1:

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 09/07/2017 16:02:06

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 09/07/2017 14:54:33
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Superfetch service terminated with the following error:  The system cannot find the file specified.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 


  • 0

#4
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

VEW take 2: (Application)

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 09/07/2017 16:03:49

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 09/07/2017 14:54:15
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: nvtray.exe, version: 7.17.13.8205, time stamp: 0x590793de Faulting module name: KERNELBASE.dll, version: 6.1.7601.23807, time stamp: 0x5915fe14 Exception code: 0xc06d007f Fault offset: 0x000000000001a06d Faulting process id: 0x134c Faulting application start time: 0x01d2f8c333f5363c Faulting application path: C:\Program Files\NVIDIA Corporation\Display\nvtray.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: 79622e94-64b6-11e7-9fda-00248c02da27

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 09/07/2017 14:54:15
Type: Warning Category: 0
Event: 64 Source: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Certificate for local system with Thumbprint 70 04 3c 28 93 39 60 37 92 da 92 8f 73 f5 50 86 60 3f bf 27 is about to expire or already expired.

Log: 'Application' Date/Time: 09/07/2017 14:53:01
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1008:
Process 2380 (\Device\HarddiskVolume2\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1008\Software\NVIDIA Corporation\Global\ShadowPlay


 


  • 0

#5
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,388 posts
  • MVP

Search for 

 

services.msc

 

hit Enter.

 

Find 

 

Superfetch and right click, select Properties.  Change the Startup Type: to Disabled.  OK.

 

 

While in the services window, look for 

Remote Procedure Call (RPC) 

(this is the first of two the second one is Remote Procedure Call (RPC) Locator which we do not care about)

 

Right click on Remote Procedure Call (RPC) and select Properties.  Make sure its Startup Type: is set to Automatic.  If you change it hit Apply.  If it is not running try to Start it.  Do you get an error?

 

Repeat the above for RPC Endpoint Mapper.

 

 

Repeat the above for Windows Driver Foundation - User-mode Driver Framework

(Normally this one is set to Manual but it works better with Automatic)

 

 

Looks like you could use a newer version of your Nvidia software.

 

What anti-virus are you using?

 

Can you download ShellExView?

 
 
Use this download:
 
Once you get it installed, run it and look for the MICROSOFT column header.  You made need to scroll to the right to see it.. Click once or twice on MICROSOFT so that items with NO are at the top.
Select all of the NO items and then click on the red led looking icon in the upper left. This should disable all of the non-microsoft additions to Explorer. Reboot and see if anything changes with the transfers.

  • 0

#6
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

Disabled Superfetch.

The RPC's were greyed out but set to Automatic.

I set Windows Driver Foundation from manual to Automatic.

Using MSE antivirus.


  • 0

#7
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,388 posts
  • MVP

Was the first RPC Started/Running?


  • 0

#8
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

Yes it was.

I restarted an the transfer problem persists.


  • 0

#9
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,388 posts
  • MVP

Test your RAM:

 

https://www.howtogee...m-for-problems/

 

Then run a Disk check:

 

 
1. Double-click My Computer, and then right-click the hard disk that you want to check. C:
2. Click Properties, and then click Tools.
3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,
4. Check both boxes and then click Start.
You will receive the following message:
The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?
Click Yes to schedule the disk check, but don't restart yet.
 
Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs.  Right click on System and Clear Log, Clear. Repeat for Application. Reboot. The disk check will run and will probably take an hour or more to finish.
 
 
Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).
 
sfc /scannow
 
(SPACE after sfc.  This will check your critical system files. Does this finish without complaint?  IF it says it couldn't fix everything then:
 
Copy the next two lines:
 
findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 
notepad \windows\logs\cbs\junk.txt 
 
Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  Close nOtepad.  Close the Command Window.
 
 
1. Please download the Event Viewer Tool by Vino Rosso
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:
 
* System
4. Under 'Select type to list', select:
* Error
* Warning
 
 
Then use the 'Number of events' as follows:
 
 
1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.
 
 
Please post the Output log in your next reply then repeat but select Application. (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)
 
Verify that you have a temp folder
 
Start, All Programs Accessories, Command Prompt.  Type
 
set temp
 
hit Enter.  The default is
TEMP=C:\Users\Username\AppData\Local\Temp
where Username is your login name.
Then
set tmp
hit Enter.  Default is the same.
TMP=C:\Users\Username\AppData\Local\Temp
 
cd %temp%
 
hit Enter and the prompt should change to show you are in the Temp folder.
 
mkdir junk

hit Enter.  Prompt should return without an error message.

rmdir junk

hit Enter.  Prompt should return without an error message.

 
 
 
 
 
 
 

  • 0

#10
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

We'e already done SFC & VEW. Do I need to repeat these processes?


  • 0

Advertisements


#11
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,388 posts
  • MVP

Always better after running a disk check.  Sometimes the disk check will find a bad spot on the drive and a couple of files will disappear.


  • 0

#12
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

No RAM or SFC issues.

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 11/07/2017 21:02:14

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 11/07/2017 20:01:33
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Function Discovery Resource Publication service terminated with the following error:  %%-2147014847

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 


Edited by phickspc, 11 July 2017 - 02:06 PM.

  • 0

#13
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 11/07/2017 21:04:29

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 11/07/2017 20:01:51
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: nvtray.exe, version: 7.17.13.8205, time stamp: 0x590793de Faulting module name: KERNELBASE.dll, version: 6.1.7601.23807, time stamp: 0x5915fe14 Exception code: 0xc06d007f Fault offset: 0x000000000001a06d Faulting process id: 0x15e8 Faulting application start time: 0x01d2fa80889d1155 Faulting application path: C:\Program Files\NVIDIA Corporation\Display\nvtray.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: c7193ba7-6673-11e7-b677-00248c02da27

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 11/07/2017 20:01:48
Type: Warning Category: 0
Event: 64 Source: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Certificate for local system with Thumbprint 70 04 3c 28 93 39 60 37 92 da 92 8f 73 f5 50 86 60 3f bf 27 is about to expire or already expired.

Log: 'Application' Date/Time: 11/07/2017 20:00:45
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1008:
Process 2452 (\Device\HarddiskVolume2\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1008\Software\NVIDIA Corporation\Global\ShadowPlay


 


Edited by phickspc, 11 July 2017 - 02:02 PM.

  • 0

#14
phickspc

phickspc

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 131 posts

The temp folder stuff had no errors


  • 0

#15
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,388 posts
  • MVP

IF the temp folder checks don't show any problems try creating a new user with admin rights and then boot into the new user.  See if things work better for the new user.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP