[WMP 11 slow to close.]

I'm a bit concerned about the report line above that reads

WARNING! An '_NT_SYMBOL_PATH' environment variable is not set....

and thinking that I perhaps haven't set something up with the debugger the way it should be. Is this a problem with the scan process/parameters, or indicating a problem with WMP? Should I have had WMP open when running this debugger?

Anything else I should do to troubleshoot? Maybe uninstall it with Revo in advanced, then re-install?

[WMP 11 slow to close.]

Yep. Opens immediately when requested. Sets itself to "playlist" mode (since re-installing, and not what I want it to do-prefer it to stay in "now playing" mode,) in "playlist" mode, memory usage is about 25mB, switch to "now playing", the usage drops to ~5 mB, click the red X to close, it vanishes, the esage increases to ~9mB and stays there for 10-11 s then disappears.

[WMP 11 slow to close.]

OK, sorry to be a pain, I glanced at a tutorial, and (I think) figured out enough to run it. (I had a space in the wrong place).

Here's the ADPlus Report text:

ADPlus Version: 6.03.004

ADPlus Version Date: 08/23/2006

OS Version: 5.1

OS Build: 2600

DateTimeStamp: Date_06-16-2008__Time_12-59-25PM

ADPlus was run on: DEEPTHOUGHT

Debuggers Installation Directory: C:\Program Files\Debugging Tools for Windows (x86)

 

Command line arguments used were:

-hang -pn wmplayer.exe -quiet -o c:\adplus

Script engine Version: 5.7.16599

WARNING! An '_NT_SYMBOL_PATH' environment variable is not set, as a result ADPlus will be forced to use 'export' symbols (if present) to resolve function names in the stack trace information for each thread listed in the log file for the processes being debugged. To resolve this warning, please copy the appropriate symbols to a directory on the server and then create an environment variable with a name of '_NT_SYMBOL_PATH' and a value containing the path to the proper symbols (i.e. c:\winnt\symbols) before running ADPlus in quick or crash modes again. NOTE: After creating the '_NT_SYMBOL_PATH' system environment variable you will need to close the current command shell and open a new one before running ADPlus again.

Selected debugger: cdb.exe

Output Directory: c:\adplus\Hang_Mode__Date_06-16-2008__Time_12-59-25PM

 

ADPlus was run with the '-quiet' switch.

 

g_Debug_Log = True

g_CheckFreeSpace = True

------ Current Actions for Hang Mode ----

Name: FullDump

Name: Stacks

Name: LoadedModules

Name: MatchingSymbols

Name: Heap

Name: Handle

Name: Dlls

Name: Locks

Name: ThreadUsage

*** ERROR ***

*** ERROR ***

*** ERROR ***

The following requested processes are not executing:

WMPLAYER.EXE;

And here is the process list text:

0 32 0 System Process

Command Line:

0 32 4 System

Command Line:

0 32 700 smss.exe

Command Line: \SystemRoot\System32\smss.exe

0 32 760 csrss.exe Title:

Command Line: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

0 32 792 winlogon.exe

Command Line: winlogon.exe

0 32 840 services.exe Svcs: Eventlog,PlugPlay

Command Line: C:\WINDOWS\system32\services.exe

0 32 852 lsass.exe Svcs: NtLmSsp,PolicyAgent,ProtectedStorage,SamSs

Command Line: C:\WINDOWS\system32\lsass.exe

0 32 996 svchost.exe Svcs: DcomLaunch,TermService

Command Line: C:\WINDOWS\system32\svchost -k DcomLaunch

0 32 1064 svchost.exe Svcs: RpcSs

Command Line: C:\WINDOWS\system32\svchost -k rpcss

0 32 1096 svchost.exe Svcs: AudioSrv,Browser,CryptSvc,Dhcp,dmserver,ERSvc,EventSystem,helpsvc,HidServ,Irmon,

lanmanserver,lanmanworkstation,Netman,RasMan,Schedule,SENS,SharedAccess,ShellHWDe

tection,srservice,TapiSrv,Themes,W32Time,winmgmt,wscsvc,wuauserv

Command Line: C:\WINDOWS\System32\svchost.exe -k netsvcs

0 32 1132 svchost.exe Svcs: WudfSvc

Command Line: C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

0 32 1344 svchost.exe Svcs: LmHosts,SSDPSRV,WebClient

Command Line: C:\WINDOWS\system32\svchost.exe -k LocalService

0 32 1416 aswUpdSv.exe Svcs: aswUpdSv

Command Line: "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"

0 32 1492 ashServ.exe Svcs: avast! Antivirus

Command Line: "C:\Program Files\Alwil Software\Avast4\ashServ.exe"

0 32 1712 spoolsv.exe Svcs: Spooler

Command Line: C:\WINDOWS\system32\spoolsv.exe

0 32 504 a2service.exe Svcs: a2free

Command Line: "C:\Program Files\a-squared Free\a2service.exe"

0 32 556 alg.exe Svcs: ALG

Command Line: C:\WINDOWS\System32\alg.exe

0 32 608 guard.exe Svcs: AVG Anti-Spyware Guard

Command Line: "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe"

0 32 632 cmdagent.exe Svcs: CmdAgent

Command Line: "C:\Program Files\COMODO\Firewall\cmdagent.exe"

0 32 716 HPZipm12.exe Svcs: Pml Driver HPZ12

Command Line: C:\WINDOWS\system32\HPZipm12.exe

0 32 1372 TFService.exe Svcs: ThreatFire

Command Line: "C:\Program Files\ThreatFire\TFService.exe" service

0 32 1896 uphclean.exe Svcs: UPHClean

Command Line: "C:\Program Files\UPHClean\uphclean.exe"

0 32 172 ashMaiSv.exe Svcs: avast! Mail Scanner

Command Line: "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service

0 32 272 ashWebSv.exe Svcs: avast! Web Scanner

Command Line: "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service

0 32 2792 explorer.exe Title: Program Manager

Command Line: C:\WINDOWS\Explorer.EXE

0 32 2928 ashDisp.exe Title:

Command Line: "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe"

0 32 2936 TFTray.exe Title:

Command Line: "C:\Program Files\ThreatFire\TFTray.exe"

0 32 2988 cmf.exe Title: COMODO Memory Firewall

Command Line: "C:\Program Files\COMODO\Memory Firewall\cmf.exe" -s

0 32 3100 cpf.exe Title: COMODO Firewall Pro

Command Line: "C:\Program Files\Comodo\Firewall\CPF.exe" /background

0 32 3196 trayclock.exe Title: TrayClock

Command Line: "C:\Program Files\SarbyxTrayClock\trayclock.exe"

0 32 3332 psi.exe Title:

Command Line: "C:\Program Files\Secunia\PSI (RC2)\psi.exe" --start-in-tray

0 32 980 svchost.exe Svcs: stisvc

Command Line: C:\WINDOWS\system32\svchost.exe -k imgsvc

0 32 2688 firefox.exe Title: WMP 11 slow to close. - Piriform Forums - Mozilla Firefox

Command Line: "C:\PROGRA~1\MOZILL~1\FIREFOX.EXE" -requestPending -osint -url "http://forum.piriform.com/index.php?showtopic=15674&view=getnewpost"

0 32 428 notepad.exe Title: debugging.txt - Notepad

Command Line: "C:\WINDOWS\system32\NOTEPAD.EXE" C:\Documents and Settings\Mark.MARK-0E4CE053E0\Desktop\debugging.txt

0 32 2680 cmd.exe Title: C:\WINDOWS\system32\cmd.exe - cscript adplus.vbs -hang -pn wmplayer.exe -quiet -o c:\adplus

Command Line: "C:\WINDOWS\system32\cmd.exe"

0 32 2576 taskmgr.exe Title: Windows Task Manager

Command Line: taskmgr.exe

0 32 4088 cscript.exe Title:

Command Line: cscript adplus.vbs -hang -pn wmplayer.exe -quiet -o c:\adplus

0 32 3372 cmd.exe Title: C:\WINDOWS\system32\cmd.exe

Command Line: "C:\WINDOWS\system32\cmd.exe" /c tlist.exe -v >"c:\adplus\Hang_Mode__Date_06-16-2008__Time_12-59-25PM\Process_List.txt"

0 32 3316 tlist.exe

Command Line: tlist.exe -v

Hope that is what you need.

[WMP 11 slow to close.]

PS I can change directory within the prompt to "C", the to program files, but if I then type any permutation of "cd Debugging tools for windows(x86)" it says "the system cannot find the path specified"

[WMP 11 slow to close.]

Installed the debug tools. Created a new folder "C:\adplus".

I need to be talked, step by step, as to how to create the data required in the command prompt. When I open the prompt, (Start>run>cmd>enter) a dos-style window opens with this info: "Microsoft Windows XP [Version 5.1.2600]

© Copyright 1985-2001 Microsoft Corp.

 

C:\Documents and Settings\(username.USERNAME)-0E4CE053E0>"

I need to know what /when/where to type into the prompt at that point.

The debug tools are installed in the default location.

[WMP 11 slow to close.]

davey is correct, it was indeed time to head off to sleep.

 

We can try to either reinstall WMP to repair it or get a memory dump to find what's causing it to hang on close. Even ProcessExplorer can be valuable as it can tell you everything WMP is accessing in terms of dlls and other items.

If you're keen to get into that level of diagnostics, great.

I have process explorer, also A2 Hijack-free (a somewhat similar tool, I believe.) I've already uninstalled (rolled back) and reinstalled WMP11. I don't know how to get a memory dump.

Just tell me what to do.

[WMP 11 slow to close.]

Oh. That registration centre. Yes, I knew that, just didn't know I knew it....

To confirm, that is the mode I selected for Dial-A-Fix. Seemed the obvious choice. Took no more than a minute.

[WMP 11 slow to close.]

Slow reply? Nooo worries! Thanks for helping.

When I reset the UPnP service, I started it, and it reported that it had started, then stopped a sthere was no work for it to do.

 

Not sure what you mean by the registration centre...

 

(Me slow reply too. Not receiving email notifications. will check profile.)

[WMP 11 slow to close.]

Used dial a fix, just ticked all in the last category- registration, restarted, unfortunately nothing has changed.

I wonder if there could be a left over .dll file in system 32 somewhere, from one of those codec packs, that is trying to lock a process somehow?

Part of the XP codec pack included a codec detective. It reported some "broken" codecs present.

Just a thought.

[WMP 11 slow to close.]

UPnP device host was set to manual; now reset to auto.

What settings/tools to check for dial-a-fix?

Already used (and use) Revo uninstaller. A keeper! Pretty confident the vestiges of CFP3 are no more, was anally quite thorough about it.

[WMP 11 slow to close.]

Thanks Tarun. It wasn't till I read the large post at the Comodo forum that I realised what a pig the FW could be to uninstall completely. When you say "there's a 2.1 cleanup script.." do you mean the .txt file a member has created to run as a .bat to remove the vestiges? (Done that.)

 

The media player only hangs on closing, and the only evidence of that is that (1) it can't be re-opened within about 11seconds, (2) the process is visible in taskmanager for 11s after closing it.

I can't see any errors in the event viewer that appear to pertain to it.

CORRECTION The event viewer records errors under "system" each time this occurs. The information in the error under "properties" is pasted:

The server {204810B9-73B2-11D4-BF42-00B0D0118B56} did not register with DCOM within the required timeout.

 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The information in the MS link indicated leaves me none the wiser, and doesn't appear to pertain to this circumstance. Still, maybe it's a lead? Navigation to the key indocated in regedit leaves me none the wiser, either. It is under HKCR, Default UPnP registrar; and an App ID {E495081B-BBA5-4b89-BA3C-3B86A686B87A} That same ID appears in several other registry locations, in HKCR and HKLM, and all mention UPnP as a common factor, IIRC.

I have just tested this action again, and for the first time since the issue first occurred, got an error message, to say the WMP may not have closed correctly last time. As a precaution, all (third party?) plugins have been disabled. (The only plugin listed is for the Nero cd burner.)

Can not reproduce this error, now.

Is this getting fairly "techy", or what?

[WMP 11 slow to close.]

hazelnut interesting food for thought. Seems most of those reports were from Vista users, with one or two from XP users. They all, however, differed from the issue I'm having, in that in my case, the player stops. The music/film stops, the GUI vanishes, just the process continues, and WMP cannot be reopened until the process exits (or is killed.)

In the reported cases, the player seemed to minimize, rather than exiting.

I tried one of the fixes suggested, that of registering the wmp dll's, but without a comprehensive list of them, was limited to registering the ones listed on the users' post. Doesn't appear to have made any difference. (Hasn't appeared to do any harm, either.)

davey it seems that just as I'm starting to learn enough to actually start to take care of the OS, someone (Redmond) starts making that more difficult, by removing the ability for the user to do same. Darn.

I still don't understand why this problem started recently. (Maybe I never will. Too bad.)

 

Have uninstalled the codec packs. XP codec pack was a right bu@@er to remove...no uninstaller. Think I got it all. Hasn't actually made any difference to the problem.

[WMP 11 slow to close.]

And I thought your post was going to die on the vine.

I'd started to wonder that, myself. But, "Patience, Tarq," I thought, "Leave it a couple more days for a bump. Nobody's going to die if it don't get fixed."

I was tempted and now I will say that SP3 did have a lot of "fixes" related to WMP.

You reckon installing SP3 might be related to this problem, perhaps? Or an example of a problem SP3 should have fixed? I only really noticed it after the last patch Tuesday. Might've started before then, I just didn't notice.

 

Thanks for the support so far, folks. Just so y'all know, I have also posted this at Wilders, and Scotts' forums, hope that's not a bad protocol. One has suggested disabling security software,as a troubleshoot (done); another has suggested uninstalling URGE, which wasn't installed anyway.

We'll see how this pans out.

[WMP 11 slow to close.]

Many thanks.

[WMP 11 slow to close.]

The codec packs have been there for a long time. Why would they suddenly cause this? Other thing is, of course, WMP without added codecs can be a little useless at some vids, and the "download codecs automatically" never seemed to work. Hence my decision to install a couple.

Will uninstall if you think it's really needed, for troubleshooting.

 

Re Comodo. There's a thread Here (Comodo forum) detailing the issue. It's not a big issue, but slightly irritating nonetheless. Warning: the thread runs to 4 pages, and concludes with the recommendation to reinstall Windows.

I'm putting that action off as long as I can, but have some of the programs I need to - for example - slipstream SP3. Just need to learn a it more about where/how to include current drivers etc in the installation disk I want to create, and think a bit more intelligently about what to include (and not) and how to only format the OS partition while leaving personal files/pics etc on the storage partition.

Since the 'pooter is currently running well (apart from the issues indicated, which I can actually live with) I'm in no rush to do too much. Next step will be to get an external HD, install Karens Replicator, and make a decent backup. Still. No rush.

[WMP 11 slow to close.]

Codec packs?

Yes, with no recent changes. FFDShow, XP Codec pack 1.3.3, plus the qt/real alternative packs that belong to Media Player Classic.

 

I had updated to Comodo 3, but after a time the self diagnostic test reported errors that it was unable to fix, despite the firewall appearing to operate correctly. (Long story, only if you're interested.)

I also use Threatfire, and didn't feel the need for an extra behaviour blocker.

[ALL-ROUND SECURITY, ANTI-SPY. ANTI-VIRUS]

Hope I haven't put you off the idea of putting together your own "suite", it's not actually that difficult, and usually there'll be a user around (found via Google search) that has the same setup you're thinking of using, and who has commented on the setup.Here is a search example of the sort of thing I mean.

Of course, the price is often right, too!

[ALL-ROUND SECURITY, ANTI-SPY. ANTI-VIRUS]

A layered defence might mean, for example, a hardware firewall/router, a software firewall to monitor and control outbound, some kind of blocker for known bad sites, like a Hosts file, an AV, a malware scanner or two (or three, for plenty second opinions), some kind of behaviour blocker (for zero day threats), some kind of application (or personal protocol) to (1) clean out unwanted files, (2) check all applications are plugged/up to date.

 

I've found that Avast AV works well with a lot of other software, Threatfire ditto, Comodo Firewall ditto (once it's trained), SAS and MBAM and A2 great for second opinions (and should a bit of cleaning actually be needed), MVPS Hosts file a useful blocker - which also prevents a lot of ads, and disabling scripts on the browser/running adblock plus (a Firefox extesion) caps it off nicely.

 

There are many applications from different vendors that work well together. And probably a few that don't. You need to try a few combos out, with variations, if you want to go that route. Check that all the holes (as much as practically possible) are covered, no conflictions/lockups occur, resource use is reasonable.

Much fun. 'Bit addictive.

 

Or you could grab yourself a nice suite, from, say, Kaspersky, or Avira. Possible (but slim) risk from that is if you get some malware that targets the brand you get, and is actually able to shut it down, you're coozed. (To quote a highly tech term.)

[WMP 11 slow to close.]

Recently I've noticed that Windows Media Player will not play a new file (video or music) if it is closed, and commanded to re-open straight away.

Looking at it in Taskmanager, the process continues for about 10s after it's closed; the GUI disappears immediately.

Once the process vanishes from Taskmanager, the player can be re-opened normally.

Tried a registry clean with CCleaner, an optimize with Iobit's AWC, uninstalling and re-installing the media player, from a fresh download from MS, all no go.

Some guru help and advice requested, please.

Windows XP SP3, (was working fine for a while with SP3), Avast Av, Threatfire, Comodo Firewall 2.4. AMD 3500+, 2G RAM. Nothing changed recently.

[Is ThreatFire a good Anti-virus program?]

Although the above is correct, it's interesting that the MS security centre recognizes TF as an antivirus.

I believe as part of its behaviour blocking characteristics, it does scan files against the AV database prior to making a decision as to whether to alert or not.

[SP3 question.]

I installed it by downloading the install package (309Mb), saving it, then disconnecting from the web, disabling all security applications, and installing it. Download took 11 min~, install (including reboot) about 20-25.

Absolutely no problems at all. Windows seems a little faster, but not measurably so, everything works.

(Did of course set a system restore point prior.)

One of the main reasons for doing it is to make a OS reinstall much faster, the other is that it seems to take forever sometimes to let WU do it.

[win xp fire wall or comodo ?]

I used to find the earlier versions of CFP3 quite intrusive, especially with D+ selected.

The latest version (3.0.22.349) is much friendlier. I only get popups for new or updated software, or connecting applications that haven't seen the web before. I'd tried 2 #3 versions before that, but was always a little confused by some of the alerts. So went to CFP2.4, but that's no longer supported (although it is still available for download); Secunia describes it as "end of life."

So to answer, XP firewall is much easier to use (it never really prompts for anything) but only blocks inbound. Comodo still does need to be answered from time to time, but is much better than it was, and blocks in and outbound traffic. So in my opinion, Comodo is much better to use.

If you choose to use it, just set the D+ in training mode for a few days.

[system tray]

How about just don't let your brother use the computer when you are using it for something else?

[Best free behavior blockers?]

Didn't like/find something lacking with Threatfire?

Comodo Firewall Pro has a HIPS module incorporated, called D+.

Online Armour has a similar feature.

[Should I unistall Norton 360?]

Has it always been slow? Or just since installing Norton360, or AdAware? Or just slowed down recently, an apparent random thing?