Weird stuff happening

[sapikest]

Alright guys i have weird stuff going on with one of the computers at a clients restaurant..

There are 3 stations with POS is loaded on to, but one of them acts as a server, it has the POS loaded with online ordering and caller id options loaded on to it also..
Computer randomly freezes well not completly..
-pos freezes
-you could get to desk top
-BUT you cant start task manager
-you cant restart or shutdown it stalls and gives error after 10 minutes (cant start tskmgr)

It happens once or twice a day but brings everything down!! if you restart its good for little bit but manually shut it down!

scanned with malware bytes NOTHING
superanti spyware (3 tracker cookies from 9-12-2012)
spybot NOTHING
cleaned it with CCCleaner (fixed registry errors)

Also did system restore to 3 weeks ago problems still continue...

ALSO I DID CHKDISK AND IT CORRECTED SOME ERRORS IT WAS FINE FOR ALMOST 24 hours after that but same problems came back after!


I worked on it this morning at 1 am... after that theres this error in event viewer

Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: MSHTML.dll, version: 9.0.8112.16448, time stamp: 0x4fed329d
Exception code: 0xc0000005

------------------------------
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.


-----------------------------

The description for Event ID 22 from source Symantec AntiVirus cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:



Symantec Endpoint Protection Auto-Protect failed to load.Application has encountered an error.
For more information, please go to: http://www.symantec.com/techsupp/se...ish&module=1000&error=0067&build=symantec_ent


---------------------------

The content source <csc://{S-1-5-21-826293891-2545798512-3732521391-1000}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
The URL was already processed during this update. If you received this message while processing alerts, then the alerts are redundant, or else Modify should be used instead of Add. (HRESULT : 0x80040d0d) (0x80040d0d)

--------------------------

Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: MSHTML.dll, version: 9.0.8112.16448, time stamp: 0x4fed329d
Exception code: 0xc0000005
Fault offset: 0x00000000003be4f4
Faulting process id: 0x1768
Faulting application start time: 0x01ce5aaa333e8552
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\system32\MSHTML.dll
Report Id: 9f627f7d-c69d-11e2-9de0-c86000a55868

----------------

 

[trevm999]

ALSO I DID CHKDISK AND IT CORRECTED SOME ERRORS IT WAS FINE FOR ALMOST 24 hours after that but same problems came back after!

You don't mention running any hardware tests. Sounds a lot like hard drive to me.

 

[FremontPC]

Run Crystal Disk Info on it and see what it has to say about the hard drive.

Are all stations using the same hardware?

 

[4ycr]

I would run some tests, I like hdtune, I check the SMART status and then an error scan if needed.

It does sound like a hard drive issue epecially after scan disk returned some errors.

 

[sapikest]

Crystal info results says hd is good?

 

[nlinecomputers]

Sounds like hardware to me. Most Restaurant machines are dirty, greasy, coated fire hazards. System is probably overheating. Need to test PSU, hard drive and memory.

 

[FremontPC]

Yeah, good time to have a look inside the box. I'd also consider removing Norton and going with something like MSE for the interim, at least until things get straightened out. Nothing can throw a wrench in the works like a knackered Norton install.

 

[sapikest]

memtest86 has been done no errors... machines are only like 10 months old... inside looks active all the fans and everything... norton is uninstalled all the avs are uninstalled

 

[FremontPC]

Memtest doesn't always find bad ram, so it might be worth swapping it out anyway.

Tell us more about the hardware and the POS software, etc.

 

[FremontPC]

BTW, are the other boxes running the same hardware?

 

[sapikest]

other machines are similar but not the same exact, this main machine has 8 gb of memory with i7, everything is top of the line.. other machines are i5 with 6gb of ram... machines are all custom made with asus motherboards if im not mistaking

 

[FremontPC]

Thanks, Sapikest!

Might be interesting to know if the i7 mobo is different, just in case there was an issue with that one. Shoot us the model and revision of it when you get a chance.

I'll still recommend swapping out the RAM as test and if you can let us know the specifics on the software too, there are others here that deal with POS and might be able to nail the problem quickly.

 

[sapikest]

name of POS is actually Point of Success..

Im not sure if the mobo is the same... im still trying to work on it shop is closed but i remoted in there RIGHT now, its super slow almost like stalling!! its driving me crazy! POS actually works main is alittle slow on switching screens, and sending out prints, but other two stations are working fine, the main is super slow with everything else tho! i will get the mobo info tomorrow and first thing in the morning i will switch out rams with one of the other stations to see if that will make any difference

 

[FremontPC]

Thanks!

Check Task Manager, Processes, (Show Processes from All Users) to see if we can narrow down the laggard, before or after the RAM swap, your choice. If the CPU is mostly idle, check Resource Monitor to see if you have a boatload of Network or Disk activity causing problems.

Are boot times comparable between the systems?

Also, might not hurt to bounce this off Point of Success, just in case they've been down this road before.

 

[katz]

Check Resource Monitor as suggested...


And...I'm still leaning towards hardware for some reason. Swap out the Power supply, and maybe replace the HD cable, just for giggles.

 

[sapikest]

alright guys problems were still the same this morning i have the monitor logs with the old rams... i just swapped out the rams with the other machine.. for now its fine but its always good forthe first couple hours.. i will keep you guys posted

 

[FremontPC]

If it chokes again, go in to the Event Viewer and check Administrative Events and see what was logged about that time.

 

[sapikest]

If it chokes again, go in to the Event Viewer and check Administrative Events and see what was logged about that time.

HOLY COW there are lot of errors! i have no idea what they stand for tho
good news is the machine i swapped out the rams from seems like its slowinf down and the main which im typing from right now still going strong... lets give it a little more time... screen shots of the errors are attached if you guys want to take a look :/

 

[FremontPC]

Good news!

Yeah, it's not unusual to see a lot of errors in the Event Viewer. Not all of them are noteworthy.

 

[sapikest]

alright guys update: main machine is running flawlsy for 3 hours so far lets keep the fingers crossed!
second machine was slowing down a little so i took one of the memories out loosk like its back to its speed... and another good news is i called the company (all pczone computers in ohio) they are covering any of my part needs since the computers are still under warranty.. they said as soon as i approve that its faulty memory they will ship a set out (8gbs) and i will have to send these faulty ones back to them...

i will keep everyone posted... and everyone thanks for the support and help!