Welcome Guest ( Log In | Click here to Register a free account now! )
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.![]() ![]() |
May 4 2008, 10:41 PM
Post
#16
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
thanks for the help a lot guys -------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 5 2008, 06:16 AM
Post
#17
|
|
![]() Forum Addict ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 12,339 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
Just wait for the next crash, the driver verifier should include info in the dump file that will help point to the offending driver. Go ahead and run the memory test also, just in case.
-------------------- - John
|
|
|
|
May 5 2008, 10:45 AM
Post
#18
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
OK Memory test coming up as soon as I get come CD's thanks again for help, system seems to be running very well at the moment, i freed up memory so i have close to 70 GB space on the HD. Will keep an eye out for dumps.
-------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 7 2008, 02:45 PM
Post
#19
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
OK havent run the memory scan yet but i did run a AVG scan and found a possible cause of the crash and reload and now the new alert...it appears there were/are trojans hiding in the back up masquerading as drivers, about 10 of them, plus eom IE temp files. Could this have replaced valid drivers? and Caused the faults?
here is the list: exactly as they were found by AVG, AVG was able to heal 10 of these, the first two entries i had to move to the virus vault by hand. i will scan again later, these were all in the backup. should i do a new clean backup? C:\backup\Doccument and Settings\Owner\Local Settings\Temporary Internet Files\Content\IE5|NFCAOXHF\n1404[2]htm JS Downloader Agen C:\backup\Doccument and Settings\Owner\Local Settings\Temporary Internet Files\Content\IE5|NFCAOXHF\n1403[1]htm JS Downloader Agen C:\backup\Doccuments and Settings\Owner\Local Settings\Temporary Internet Files\Content\IE5|NFCAOXHF\upd[1].htm JS Downloader Agent C:\backup\WINDOWS\system32\divxrs.dll C:\backup\WINDOWS\system32\dprot.sys C:\backup\WINDOWS\system32\drivers\InCDPass.sys C:\backup\WINDOWS\system32\drivers\InCDRm.sys C:\backup\WINDOWS\system32\drivers\LV561Av.SYS C:\backup\WINDOWS\system32\drivers\LVcKap.sys C:\backup\WINDOWS\system32\drivers\\LVMDrv.sys C:\backup\WINDOWS\system32\drivers\LVPr2Mon.sys C:\backup\WINDOWS\system32\drivers\LVUSBSta.sys and do we need to replace these drivers? -------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 8 2008, 07:30 AM
Post
#20
|
|
![]() Forum Addict ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 12,339 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
Normally, I'd move this post over to the "Am I Infected" forum, but there's a lot of good stuff here that should stay here. So, I suggest that you start a new thread over there ( http://www.bleepingcomputer.com/forums/forum103.html ) and maybe include a link to this topic ( http://www.bleepingcomputer.com/forums/topic145035.html ) to help speed things along.
Good luck! -------------------- - John
|
|
|
|
May 8 2008, 11:01 AM
Post
#21
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
Hi usa and thanks....i was over there before the lock up when i had to re install. In the end they advised me to do what i had to do which was re install. But my concern now is that i may indeed have a memory problem. and i will still run that memory test you suggested, just been too busy with work to do it yet. Thanks and i am hopeful that those lingering viruses in the back up will be taken care of by a good cleaning or a new save point. But i will certainly take your suggestion and start a thread on them too. Thanks very much, and if i get more dumps i will post them here so we get all the bases covered. thanks agian.
-------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 8 2008, 12:29 PM
Post
#22
|
|
![]() Forum Addict ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 12,339 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
Most everything that we've done so far is affected by viruses - even the crash dumps can be caused by viruses. I'd suggest the memory test, then hanging out in the Am I Infected forum until you're sure the system is clean. Most of the fixes that we propose here are based on the assumption that the system is clean - if it isn't, then there's no telling if the fix will work or not.
You mentioned a recent reinstall. If you formatted your drive when you reinstalled, it's likely that the system was clean at that point. If the backups are infected, move them to alternate media (such as a flash drive or external USB drive) and use an updated antivirus and antispyware program to scan the backup. Have it delete anything malicious that it may find. -------------------- - John
|
|
|
|
May 9 2008, 12:26 AM
Post
#23
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
OK cool will do. will do the memory scan now. thanks a lot....
and ys we did reformat completely. so the bugs were in the backup it looks like. hiding out. i have scanned with AVG latest and Spybot and will do the cleanup trip over at the ami i infected. thanks gain, but i will post the mem check here. thanks gain. -------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 9 2008, 10:01 AM
Post
#24
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
Ok ran the memory test all night and it appears to have passed with some errors, here was the log from the screen, i do not know how to find the log from the test, the instructions were minimal on the free version of the test, that might be something to fix for them, as it did not say how to compile or save the results.
Wd11Time Checked Rsvd Mem Mep Map Cach ECC TEST Pass Errors ECC Errs 8:33.31 1024M 84k e820-Std on off Std 8 11 8 -------------------------------------------------------------------------------------------------------------------------------------------- Tst Pass Failing Address Good Bad ErrBitts Cat Ck 3 2 00018b61ee4 395.0MB 04040404 04040404 000002000 1 3 3 0001e6e9ee4 486.5MB fefefefe fefefefe 000004000 1 3 3 00001f969ee4 505.5MB fefefefe fefefefe 000040000 1 4 4 00001cb69ee4 459.5MB bofe4eaa bofe4eaa 000040000 1 4 4 0000196e9ee4 406.5MB 9f5cde31 9f5cde31 000040000 1 4 5 00001fe368ee4 507.5MB 855b7630 855b7630 000040000 1 4 5 00001d169ee4 483.5MB fc64feb5 fc64feb5 000040000 1 4 6 00001d169ee4 465.5MB cdc1c69c* cdc1c69c* 000040000 1 4 6 000019369ee4 403.5MB 0f21ce35* 0f21ce35* 000040000 1 3 8 000019361ee4 404.5MB 04040404 04040404 000040000 1 *not sure if first character is a "c" or an "0" operator error (my writing) -------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 9 2008, 07:04 PM
Post
#25
|
|
![]() Forum Addict ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 12,339 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
It's my opinion that RAM should have no errors - so I'd suggest testing each individual stick to see if all have errors or not. Infrequently there have been problems with the slots (rather than the RAM) that will throw errors as if they were in RAM.
So I'd test each stick individually, then test each slot with one of the known good sticks of RAM in order to see where the errors lie. -------------------- - John
|
|
|
|
May 10 2008, 03:51 PM
Post
#26
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
OK, that will take the help of my tech, so that will be done as soon as i can get him over here since i dont know how to do what you are suggesting....
thanks again. chris -------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
May 17 2008, 11:16 AM
Post
#27
|
|
|
Member ![]() ![]() Group: Members Posts: 118 Joined: 15-April 07 From: Colorado and California Member No.: 124,853 |
I has an error alert this AM starting up sysetem, little pop up said
Error in Loading Driver 1052 can i reistall it? or find out if this is legit and what this driver does? thanks I had a notice from Spybot yeterday saying there was a significant change in the registry and i did not allow it because i had no idea what it was thanks chris -------------------- Game Researcher and Designer
http://chris-today.blogspot.com/ |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 4th July 2008 - 09:56 PM |