Help - Search - Members - Calendar
Full Version: Computer In Critical Condition. Fatal System Errors. Even In Safe Mode
BleepingComputer.com > Security > Am I infected? What do I do?
   
Tom Wade
my computer, not the one i'm on, is dead. dead dead. i tried going through safe mode to run a few scanner programs i have and it freezes there, also. i had saved, on another forum, a few hijackthis logs before the massive crash, so i can post those if need be. i just wanted to make first contact, here. i just signed up and i am lost lost lost when it comes to this stuff.

i just had the computer on, and a few of the processes that were running (again, before it crashed) seemed less than benign.

example
AshMaiSv.exe - although it's associated with avast, i worry. it sucks memory, and never used to run, before.

yaemu.exe
services.exe
SpoolSv.exe
Fxssvc.exe
CCEVTMGR.exe
DRWTSN32.exe
LSASS.exe
pbago.exe
dypwo.exe
imapi.exe

Med.dll had been running, i guess i managed to fix one of the problems.


the end result everytime is a blue screen with "STOP:C000021 {FATAL SYSTEM ERROR} 0xc0000005.
something about Regopenkeyx 5AA0? might flash on the screen before the crash.


please please please let me know what i should do. unless of course it's wipe it clean and start over, that's what i'm ultimately trying to avoid. but, some reply some acknowledgement would be very much appreciated. or recomment i should post the hijackthis logs (in the appropriate section, of course)
i'm so lost.
rigel
Hi Tom Wade,

Welcome to BleepingComputer!

We will be glad to help you, but a question first.
QUOTE
also. i had saved, on another forum, a few hijackthis logs before the massive crash


Do you have active posts on the other forums? If you do, you need to follow the advice given by the members trying to help you there. One team needs to work the problem so they fully understand what is going on, without the surprise of something changing unknowingly.

With that said, you can use our start here malware removal guide. It has clear steps to clean your computer.

Good luck Tom. If you have any questions, please ask.

rigel
Tom Wade
well, i currently have posts, on other forums. i wouldn't exactly call them active, though. over at daniweb.com. the first problem i had with the computer, they were all amazingly helpful. the few times i've been fortunate to ease that computer into actually getting online, i posted a few desperate threads, chock full o' logfiles, and scan results. out of the three threads, i recieved one reply which was a bit less helpful than they had been in the past:
i hate to inform you but that file is a malicous file.

remove it

so, yea. i'll take a glance on over at that step by step section. at least give those other threads ...more? of a chance to die down. they're in mortal danger of expiring, as it is, though.

now i have a question, normally i would never have 3 threads going at the same time, i'd like your forum to remain kinda tidy. so, if i get stuck again or need further assistance do i stick to this particular thread, and get in touch with you that way? or, am i in the wrong thread altogether, and i should start clean in another section/thread?

thanks already
tom
rigel
Welcome back Tom,

For this problem, please stick with this thread. If you have any questions, prior to reaching the HJT log step, you can post them here. If we get to the point of submitting a HJT log, then the log will have to be posted in the HJT forum and control will be turned over to specialist in that team. We are here for you - questions?, just ask.


Good luck,

rigel
rigel
Hi Tom.

I see Buckeye Sam is working with you now on your post. The HJT team here is as good as it gets. Follow their instructions, and you will be on you way to a clean machine!

Take care

rigel
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.