Help - Search - Members
Full Version: Comp crash! (keeps restarting before winxp loads)
Piriform Community Forums > Computer Help and Discussion > Spyware Hell
desireet
Hello,

I'm hoping this isn't a huge problem and it can be taken care of relatively easily... but since I don't know what's going on, or even how it started, I doubt it.

My computer restarted a few days ago, saying it had a "serious error and had to restart itself"... it was "caused by an unrecoverable hardware error that caused the operating system to stop funtioning." It was my first clue that something was up...

I ran SuperAntiSpyware and it found some cookies to delete - I figured, no big deal. I also ran AVG and although it didn't get all the way through before restarting (after 3 hours, I think... it was going unusually slow), all it had noted was a change to system32 (???? does that sound right?). I figured it was a fluke and just ignored it.

However, last night, out of nowhere, after watching a movie, I went to go on my computer, and it restarted, and restarted, and restarted (etc, etc, etc). It would restart between the windows loading page (black, with the window and the grey bar shows loading progress) and the login page. The screen would go black and then it would restart. It would say, at one point, that it was looking for backup information in the CDROM drive. (I didn't write it down, it was late/early.) So I just powered off and went to bed.

This morning, it started up fine... but there's no internet (because, although it says it's connected, when I try repair, it can't detect the tcp/ip address) and I have all these alerts telling me that my windows firewall is turned off, the avg email scanner isn't fully funtioning (although I don't use outlook express, so I don't know if that's important).

I'm using another computer to write all this... I don't really know where to go from here. I've posted here before, but it was for the computer I'm now using to post. I bought the computer I have, secondhand, about 3 months ago. I haven't had any problems until now.

Thanks for your help!
Desiree

PS - I don't have Hijackthis downloaded onto that computer.
rridgely
This sounds like a hardware problem to me. (obviously if it is there is nothing I can do to help)
This could be any number of things as well, and honestly I'm not really much of a hardware trouble shooter.(I can obviously open up a case and tell whats fried but thats about it.)

You might need to take this one to a shop to be repaired. sad.gif
desireet
Crap.

sad.gif

That was not what I wanted to hear at all... not even a tiny little bit.

Sigh, thank you, dear.
-me
desireet
***i realize you said it was a hardware problem... however, many of the issues have resolved themselves, leaving me to think i have some sort of virus***

every time i try to run ad-aware or superantispyware [or bitdefender, for that matter], it restarts in the middle of it. [i'm assuming it's once it searches a certain document or folder that is infected... ]

are you able to tell anything by my hijackthis log? and if so, do you have any advice?

Logfile of HijackThis v1.99.1
Scan saved at 9:10:54 PM, on 3/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Documents and Settings\user\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AUTOSETUP.EXE
O4 - Global Startup: Reboot.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1162788952666
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: W2k PCtel speaker phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
rridgely
Lets try this:

Download ComboScan to your Desktop
  • Close all applications and windows.
  • Double-click on comboscan.exe to run it, and follow the prompts.
  • The scan may take a minute. When the scan is complete, a text file will open - ComboScan.txt
  • A folder Comboscan will also open which contains the Comboscan.txt and a Supplementary.txt.
  • Copy and paste the contents of ComboScan.txt in your next reply.
  • Extra Note: When running Comboscan, some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so. Also, it may happen that your Antivirus flags Comboscan as suspicious. Please allow the Comboscan to run and don't let your Antivirus delete it. (In this case, it may be better to temporary disable your Antivirus)


-------------------------

Run Kaspersky WebScanner
  • Please go HERE and click Kaspersky Online Scanner
  • Read and Accept the Agreement
  • You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • If you see a Windows dialog asking if you want to install this software, click the Install button.
  • The program will launch and then begin downloading the latest definition files,
  • When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
  • Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
  • Under "Please select a target to scan:", click My Computer to start the scan.
  • When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
  • Paste kaspersky log onto forum.

desireet
well, i got comboscan to run... but kaspersky keeps restarting. i go back and start it over again (have 3 times), but it restarts every time. it's rather time comsuming. i wanted to post this first. i'll keep trying with kaspersky, though. i doubt it's gonna work... but i'll try. it's made my computer restart again, at random times. (i left it on overnight, and it restarted automatically... hasn't done that in awhile. this morning, i was using photoshop, and it restarted... 3 times. i did not have the scan running during those times.)

ugh! dry.gif here's this (i ran it last night, but re-ran it just now, so it would be current):

ComboScan v20070306.20 run by user on 2007-03-10 at 10:51:08
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as user.exe) ------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 10:52:03 AM, on 3/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\system32\dumprep.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Documents and Settings\user\Desktop\comboscan.exe
C:\DOCUME~1\user\Desktop\user.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MagicDisc\MagicDisc.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AUTOSETUP.EXE
O4 - Global Startup: Reboot.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1162788952666
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: W2k PCtel speaker phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe


-- Files created between 2007-02-10 and 2007-03-10 -----------------------------

2007-03-09 21:58:50 0 d-------- C:\WINDOWS\system32\Kaspersky Lab<KASPER~1>
2007-02-18 15:52:17 0 d-------- C:\Documents and Settings\user\Application Data\Help
2007-02-12 13:32:17 0 d-------- C:\WINDOWS\system32\appmgmt
2007-02-12 12:49:37 0 d-------- C:\Program Files\Faces.com
2007-02-12 12:34:06 0 d-------- C:\WINDOWS\Sun
2007-02-12 12:34:06 0 d-------- C:\Documents and Settings\user\Application Data\Sun
2007-02-12 12:30:35 0 d-------- C:\Program Files\Java
2007-02-12 12:24:37 0 d-------- C:\Program Files\Common Files\Java


-- Find3M Report ---------------------------------------------------------------

2007-03-08 20:21:06 0 d-------- C:\Program Files\SUPERAntiSpyware<SUPERA~1>
2007-03-06 21:08:50 0 d-------- C:\Documents and Settings\user\Application Data\AVG7
2007-03-04 17:54:41 2068 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-03-04 15:46:42 0 d-------- C:\Documents and Settings\user\Application Data\U3
2007-02-12 12:33:35 3409 --a------ C:\WINDOWS\mozver.dat
2007-02-06 23:06:55 0 d-------- C:\Program Files\MySpace
2007-02-03 22:38:44 0 d-------- C:\Documents and Settings\user\Application Data\AdobeUM
2007-02-03 22:09:46 0 d-------- C:\Documents and Settings\user\Application Data\Adobe
2007-01-30 23:14:14 0 d-------- C:\Documents and Settings\user\Application Data\Viewpoint<VIEWPO~1>
2007-01-29 00:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
2007-01-20 13:46:19 12288463 -----n--- C:\AVG7QT.DAT
2007-01-18 10:57:15 0 d-------- C:\Program Files\Internet Download Manager<INTERN~2>
2007-01-18 10:56:39 0 d-------- C:\Documents and Settings\user\Application Data\DMCache
2007-01-16 00:05:15 0 d-------- C:\Documents and Settings\user\Application Data\MySpace
2007-01-15 22:44:08 0 d-------- C:\Documents and Settings\user\Application Data\IDM
2007-01-14 08:31:28 0 d-------- C:\Program Files\Common Files\AOL
2007-01-13 22:01:06 0 d-------- C:\Documents and Settings\user\Application Data\acccore
2007-01-13 21:59:59 0 d-------- C:\Program Files\AIM6
2007-01-13 21:59:20 0 d-------- C:\Program Files\Viewpoint<VIEWPO~1>
2007-01-13 21:58:58 0 d-------- C:\Program Files\Common Files\Nullsoft
2007-01-13 21:57:31 335 --a------ C:\WINDOWS\nsreg.dat
2007-01-12 09:27:42 232960 --a------ C:\WINDOWS\system32\webcheck.dll
2007-01-12 09:27:42 51712 -----n--- C:\WINDOWS\system32\msfeedsbs.dll<MSFEED~1.DLL>
2007-01-12 09:27:42 458752 -----n--- C:\WINDOWS\system32\msfeeds.dll
2007-01-12 09:27:42 6054400 --a------ C:\WINDOWS\system32\ieframe.dll
2007-01-11 11:00:39 949 --a------ C:\WINDOWS\rosebb.dat
2007-01-08 19:04:54 105984 --a------ C:\WINDOWS\system32\url.dll
2007-01-08 19:04:08 102400 --a------ C:\WINDOWS\system32\occache.dll
2007-01-08 19:02:04 266752 --a------ C:\WINDOWS\system32\iertutil.dll
2007-01-08 19:02:04 44544 --a------ C:\WINDOWS\system32\iernonce.dll
2007-01-08 19:02:02 384000 --a------ C:\WINDOWS\system32\iedkcs32.dll
2007-01-08 19:02:02 383488 -----n--- C:\WINDOWS\system32\ieapfltr.dll
2007-01-08 19:02:02 161792 --a------ C:\WINDOWS\system32\ieakui.dll
2007-01-08 19:02:02 230400 --a------ C:\WINDOWS\system32\ieaksie.dll
2007-01-08 19:02:02 153088 --a------ C:\WINDOWS\system32\ieakeng.dll
2007-01-08 19:01:14 17408 --a------ C:\WINDOWS\system32\corpol.dll
2007-01-08 19:00:48 124928 --a------ C:\WINDOWS\system32\advpack.dll
2007-01-08 18:08:14 56832 --a------ C:\WINDOWS\system32\ie4uinit.exe
2007-01-08 18:08:10 13824 --a------ C:\WINDOWS\system32\ieudinit.exe
2007-01-02 09:34:12 245760 -----n--- C:\WINDOWS\Setup1.exe
2007-01-02 09:34:06 73216 --a------ C:\WINDOWS\ST6UNST.EXE
2007-01-01 20:19:39 8 --a------ C:\WINDOWS\rosebl.dat
2006-12-29 22:32:21 0 --a------ C:\WINDOWS\system32\CMMGR32.EXE
2006-12-19 13:52:18 134656 --a------ C:\WINDOWS\system32\shsvcs.dll
2006-12-19 10:16:47 333824 --a------ C:\WINDOWS\system32\wiaservc.dll


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"SUPERAntiSpyware"="C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"
"Aim6"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"CountrySelection"="pctptt.exe"
"NeroFilterCheck"="C:\\WINDOWS\\System32\\NeroCheck.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=""

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"
"MySpaceIM"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"
"MySpaceIM"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ AlerterWebClientLmHostsRemoteRegistryupnphostSSDPSRV\
NetworkService REG_MULTI_SZ DnsCache\
rpcss REG_MULTI_SZ RpcSs\
imgsvc REG_MULTI_SZ StiSvc\
termsvcs REG_MULTI_SZ TermService\
HTTPFilter REG_MULTI_SZ HTTPFilter\
DcomLaunch REG_MULTI_SZ DcomLaunchTermService\


[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G]
Shell\AutoRun\command G:\LaunchU3.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{840b5fed-97cc-11db-93ad-000fb378ef61}]
Shell\AutoRun\command G:\LaunchU3.exe


-- End of ComboScan: finished at 2007-03-10 at 10:52:39 ------------------------
rridgely
Sorry for the delay. I still think this is hardware.
Its seems to be shutting down during times of high resource usage.(virus scans and photoshop)

First I would run a memory test like memtest86.
desireet
well, i ran memtest86, although i'm not computer savvy - so i don't know what all it did.

i left it running overnight and then while i was at work. when i came home tonight, it had been running for 23 hours and some odd minutes. on the normal screen, it said there were 2,949,120 errors. under configuration and error report, on test 7, there were 15,152 and on test 8 - 1,350. so i'm not exactly sure how that all works out. i ended up hitting escape to exit, midway through the exam (though it had run twice, at least). windows would not load for anything! it kept restarting over and over. i shut it down, waiting, started it up, it still wouldn't load. (it would restart in the middle of the black background, picture of the window, and blue progress bar screen.) i shut it down again for an extended period of time, started it up again, and it finally started up.

at a few points, it loads a page that says it has shut down in order to protect files and folders. if the shutdown was due to hitting the restart or shutdown button, or for other reasons i don't know of, then restart in normal saved mode. (which is the last saved configuraton.) otherwise it offers the option of safe mode, and a few others.

any ideas? i read a walkthrough on memtest, and the info on their page, but it was a little above my head. i wasn't sure if i was supposed to run it in a certain way - so i just did it however it automatically ran, after i saved it to a cd and rebooted. is it supposed to save the information it gathers anywhere?

is my hard drive completely fried? and if so... why?! i haven't done anything to it and i just bought it around christmas. granted it was a rebuilt computer. do i go back to who i bought it from and demand a refund? do you even have the answers?

thanks a million,
desiree
rridgely
Well, the fact that it found all of those errors means that more than likely your ram is dead. Thats why your computer reboots any time you do anything like using photoshop or run a virus scan.

You have 3 options. Go to the person you bought the computer from and have them fix it, go buy the ram yourself and replace it, take it somewhere else to be fixed.
desireet
i bought the computer off of craigslist, so going back to the person isn't looking promising. (i know, i know... but, don't worry, i didn't spend much on it.)

ram isn't that hard to replace; it's basically a matter of putting the old stuff out of the plug in spot and putting the new one in, right? (yes, you can see how hardware savvy i am by my word usage.) am i going to loose everything on my computer by doing that?

is it best, money-wise, time-wise, and saving-my-information-because-i-don't-know-what-i'm-doing-and-might-screw-up-wise, to just take it in?

ps - how much does new ram cost?
rridgely
Nah you wont loose your information. Your data is stored on your hard drive, ram is what your opperating system and programs run in.
Its simple to replace, but if you don't think you can do it you should take it to a shop.

The price of ram depends on what type of computer you have, how much you get, ect.
I would say at the least its going to be about $30 US if you put it in yourself.(I have no clue where your at. tongue.gif)
Then of course you would have to pay labor if you took it to a shop, which would just depend on where you went.

Not to look on the bad side, but if the ram in this machine is bad, theres a chance other things could be bad as well.
Call around the shops in your area and see how much they would charge to install ram, and just examine your hardware.

desireet
oh yeah, haha. i'm in spokane, wa. biggrin.gif

$30 isn't so bad. but i did consider the fact that other things might be bad. i'll make some calls tomorrow and see what i can find out. i don't mind installing it myself; i'm sure there's instructions online. [everything i need to know, i learned from the internet. wink.gif ] as far as checking the rest of the hardware, i'll find out what the places have to say.

if it gives me any bonus points, i knew my info was stored on my hard drive... i just didn't know if ram and hard drive had to do with each other. however, isn't ram what makes your computer run (and how fast it runs, etc.)? and hard drive is storage space? would a defrag find errors, or would it most likely just cause a restart?

if i opened the computer up, might i be able to see if there are errors or are they even more internal than that? (ie. a fried hard drive, etc.)

no one should have as much bad luck as i do.
CTskifreak
Defragging just reorganizes the items on your hard drive into a more efficient way so that when you request something from it, it is as quick as possible. It won't check your RAM.

Pulling your RAM to replace it won't affect the stuff on your hard drive. Everything permanently installed/saved is kept on the hard drive. RAM stores stuff recently used on it so if you access it again, it is quicker. So if/when you replace it, you won't lose anything.

Here is the perfect analogy I once found: Your processor is the brain, and the RAM is the muscle of your computer. It could think it, but it might not be able to do it.

Opening up your case to look at the RAM won't tell you anything, (goes for the hard drive as well) unless it is A ) smoking or B ) melted or C ) something else bad.

It most likely is your RAM - you would have never been able to boot into Windows if the hard drive went on you.

Go to Crucial and if you can, run their full system scan thing from the main page where it says:
The Crucial System Scanner - Find out what is already installed in your computer with our Crucial System Scanner. You will also get recommended compatible upgrades that are guaranteed to work in your computer!

Allow it to install anything it asks (Active X control, etc) and it will tell you what type of RAM to buy. If you can't use that computer, try opening it up and seeing if it tells you what type of RAM it is (PC-133 [most likely not]) or something similar to that.

I hope your luck improves biggrin.gif


AJ
desireet
thanks AJ, but i'm going to hold off on running any scans/okay-ing any installations until a moderator approves them.
rridgely
Actually he gave you quite good advice. smile.gif
desireet
i wasn't doubting it. i just didn't want to run it without an okay. i didn't want to sound ungrateful or rude, but i still wanted to be cautious.

i'll do my best at running the scan, see what i can come up with.

(ps - i had originally written "no offense meant," but took it away. thank you thank you thank you aj and rridgely. i'm forever indebted to you. i'll give you my first child. wink.gif )
desireet
256 MB 256 MB SDRAM, PC133 SDRAM, PC133
EMPTY EMPTY


  • Maximum Memory Capacity: 512 MB
  • Currently Installed Memory: 512 MB
  • Available Memory Slots: 2
  • Number of Banks: 4
  • Dual Channel Support: N.A.
  • CPU Manufacturer: AuthenticAMD
  • CPU Family: AMD Athlon™ Processor Model 4, Stepping 2
  • CPU Speed: 996 MHz
It requires me to enter in the manufacturer of the computer, but i don't know it (or i can use what they found in the scan) - and AuthenticAMD is not a choice.

any suggestions?

oh, i found this information in an email on my computer... this is what came with the computer (or so i was told), i don't know if it helps:

128 kilobyte primary memory cache
256 kilobyte secondary memory cache

122.93 Gigabytes Usable Hard Drive Capacity
115.06 Gigabytes Hard Drive Free Space

_NEC DVD+RW ND-1000A [CD-ROM drive]
MATSHITA DVD-ROM SR-8586 [CD-ROM drive]
3.5" format removeable media [Floppy drive]

Maxtor 6L120P0 [Hard drive] (122.94 GB) -- drive 0, s/n L30XQ1SH, rev BAJ41G20, SMART Status: Healthy

CTskifreak
Thanks rridgely, I take that as a huge complement, especially it coming from you. laugh.gif cool.gif biggrin.gif

desireet - First, can I ask you a question? How old is your PC? A motherboard that can only have 512 MB of RAM is not a lot. Considering your processor is running at approximately 1 gHz, it might soon be time to upgrade your PC. If you are using it for basic things (browsing the web, email, word documents, etc.) it seems to be a good system.

The trick is that designation of PC133 - that is the type of RAM you need. With that number, there is only one type of RAM, so you don't have to worry about different types of RAM under that designation.

Tiger Direct - PC133 RAM Page
NewEgg - PC133 RAM Page

It is better to buy two sticks of RAM than one single stick, so buying two 256 MB sticks should do the trick.

I hope this helps.

AJ
desireet
my computer is a rebuilt computer, so it's a bit older. i believe... maybe he built it all himself? i understand, some things can be replaced and upgraded, but ram cannot, correct? [because of the slots and the way it's made; i'm sure it's more complicated than that, but i get the idea, no?] i don't know the exact age, due to the fact that i bought it off of craigslist. i know, i know, that's probably the reason it's acting up - but i got a great deal on it and it's been fine for the past 4 months.

i only use it for basic things, so the 512 was fine when i first bought it. i'm wondering about upgrading to a mac, when i do upgrade. it won't be for a few months, due to having to save the money, so i think my only option right now is to replace the ram. [it's getting worse every day.]

as far as using two sticks instead of one. how do i know that there are two slots? should i just open it up and look? is it most likely that there is just one stick of 512 in there right now? what are the benefits of having two smaller ones that equal the same, instead of one bigger one?

thank you for your help! rolleyes.gif
login123
There is a free application that will tell you a lot about your system. It's called CPU-Z. Depending on when your system was built, you may need an previous version. Trial and error, I guess? sad.gif The newest one doesn't work right on mine. The wwrong version won't hurt anything, but might not work right.

The newest and several previous versions are available at: http://www.filehippo.com/download_cpuz/
Instructions can be found at: http://www.cpuid.com/cpuz.php

It takes it a minute to come up. There is a tab called SPD, which will show you how many memory slots you have. You can even save it as a .bmp file. smile.gif Looks like this: (edited 20 mar 07, changed picture. . .TaDaaa, thanks Hazelnut)

Click to view attachment

As you did before, wait for someone who knows what (s)he is doing to confirm this. Don't pay any attention to that "advanced member" stuff, I can't even figure out how to put a picture in a post.
desireet
latest news: i'm hardly using my computer because it sucks so bad. BUT, next weekend my computer-savvy friend is coming into town, so i'll have him look at it and tell me exactly what to do. [then i won't have to mess around with any more programs... instead, i'll let him. wink.gif ]

thanks login123, and everyone else. especially rridgely. i just referred someone else here last night because she used to live with a bunch of boys who used her computer for porn... so she has a massive virus. hopefully you guys will be able to help her out. it might take her a few days to show up, though.

anyway, God bless and peace out.
ph34r.gif [haha, i think he's so cute!]
CTskifreak
Desireet...RAM is replaceable.


It pops in and out of the motherboard...clips hold it in.

If it is that slow...it might be time to buy a new PC.

AJ
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.