Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Klonep Virus


  • This topic is locked This topic is locked
13 replies to this topic

#1 Stimp11

Stimp11

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 18 May 2008 - 03:23 PM

I posted a couple weeks ago and noone responded...I also put a link in the 5 day folder...I don't think I've seen this board so busy!!! Anyway, I have deleted a few things, updated programs, etc. so i am posting under new topics with a new, updated log file reflecting current information.

I am sometimes able to run a scan with AVG. It finds KloneP virus, which I heal...and it pops up again next time. Sometimes, on start-up, AVG alerts for the virus, otheres it does not. Spybot and adaware restarts the computer. AVG on automatic restarts down the computer. (scanning at my comand sometimes shuts down)

AVG appears to be working blocking new viruses, etc. so somehow KloneP got through and just won't go away.

At this point, computer functions for normal tasks...although slower than usual.

Thank you for your help.
Hre is the scan:



Deckard's System Scanner v20071014.68
Run by Our Computer on 2008-05-18 16:12:49
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 480 MiB (512 MiB recommended).


-- HijackThis (run as Our Computer.exe) ----------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:13:22 PM, on 5/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
C:\WINDOWS\system32\Smtray.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQInet.exe
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Microsoft Money\System\Money Express.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\FirstClass\fcc32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Our Computer\Desktop\Spyware Busters\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\OURCOM~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.kdka.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/u...can_unicode.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1202165211656
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1202251466937
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 8734 bytes

-- Files created between 2008-04-18 and 2008-05-18 -----------------------------

2008-05-17 22:37:04 0 dr-h----- C:\Documents and Settings\Our Computer\Recent
2008-05-06 14:16:03 0 d--h----- C:\$AVG8.VAULT$
2008-05-02 23:43:52 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-02 23:43:48 0 d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-05-02 23:20:49 0 d-------- C:\Program Files\Trend Micro
2008-05-02 22:16:07 0 d-------- C:\Program Files\PC Registry Cleaner
2008-05-02 21:57:44 0 d-------- C:\WINDOWS\system32\drivers\Avg
2008-05-02 21:57:24 0 d-------- C:\Program Files\AVG
2008-04-30 21:00:58 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-04-22 20:02:11 0 d-------- C:\Program Files\Apple Software Update


-- Find3M Report ---------------------------------------------------------------

2008-05-15 14:15:03 0 d-------- C:\Documents and Settings\Our Computer\Application Data\LimeWire
2008-05-02 23:30:42 0 d-------- C:\Program Files\FirstClass
2008-05-02 22:35:03 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-05-01 21:00:58 0 d-------- C:\Program Files\Boardmaker with SD Pro
2008-05-01 15:51:34 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-04-16 18:55:32 0 d-------- C:\Documents and Settings\Our Computer\Application Data\Sun
2008-04-15 20:22:32 0 d-------- C:\Documents and Settings\Our Computer\Application Data\Google
2008-04-15 20:03:22 0 d-------- C:\Program Files\iTunes
2008-04-15 20:03:10 0 d-------- C:\Program Files\iPod
2008-04-15 20:01:13 0 d-------- C:\Program Files\QuickTime
2008-04-15 18:53:48 0 d-------- C:\Program Files\Google
2008-04-15 14:44:35 0 d-------- C:\Program Files\Java
2008-04-05 19:43:38 284 --a------ C:\Documents and Settings\Our Computer\Application Data\burnaware.ini
2008-03-31 18:36:22 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-27 18:42:10 0 d-------- C:\Documents and Settings\Our Computer\Application Data\Viewpoint
2008-03-19 16:51:33 0 d-------- C:\Documents and Settings\Our Computer\Application Data\Real


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CPQEASYACC"="C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe" [08/15/2001 02:50 PM]
"WCOLOREAL"="C:\Program Files\COMPAQ\Coloreal\coloreal.exe" [09/26/2001 12:30 PM]
"Smapp"="Smtray.exe" [05/31/2001 11:32 PM C:\WINDOWS\system32\SMTray.exe]
"WorksFUD"="" []
"Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [07/13/2000 04:00 PM]
"Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [07/13/2000 04:00 PM]
"srmclean"="C:\Cpqs\Scom\srmclean.exe" [07/24/2001 05:34 PM]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [07/25/2003 10:14 AM]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" [08/20/2003 05:23 PM]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [08/20/2003 03:57 PM]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [06/25/2003 12:24 PM]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [08/20/2003 05:15 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [02/04/2008 08:38 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [02/22/2008 04:25 AM]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [01/11/2008 11:16 PM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [03/28/2008 11:37 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [03/30/2008 10:36 AM]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [05/02/2008 09:57 PM]
"KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 12:43 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 08:00 AM]
"Aim6"="" []
"MoneyAgent"="c:\Program Files\Microsoft Money\System\Money Express.exe" [07/19/2000 01:00 PM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [04/15/2008 06:54 PM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"tscuninstall"=%systemroot%\system32\tscupgrd.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 2:01:04 AM]
Microsoft Works Calendar Reminders.lnk - C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [7/13/2000 4:00:00 PM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"




-- End of Deckard's System Scanner: finished at 2008-05-18 16:13:51 ------------

BC AdBot (Login to Remove)

 


#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 02 June 2008 - 05:03 AM

Hi,

I can't see anything suspicious here - so please let me know where AVG is finding this one. Filename and path.
This because, AVG has been flagging a lot of false positives lately....

Sidenote... I see you have Viewpoint installed...
Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546
I suggest you remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present.
  • Viewpoint
  • Viewpoint Manager
  • Viewpoint Media Player

AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 Stimp11

Stimp11
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 03 June 2008 - 11:01 PM

I removed Viewpoint Media Player (no other Viewpoint programs were listed in my add/remove programs list).

I was able to run AVG tonight ...no infections...only tracking cookies, which I removed. Previously Klone P virus showed up in BurnAware...and I trashed the entire program...Klone P had shown up in a different program but then "moved" to Burnaware after I "healed" it. I wondered why it would move...but with the name "Klone" I figured it replicated itself.

SO..I am guessing the virus alert was most likely a false alert like you said.

However...Spybot and Adaware still bring up a blue "death screen" and it shuts down my computer...it restarts and everything works and is accounted for (so far) but I freak each time it happens. Also, the same thing happens 50% of the time when I manually start the AVG scan. I cannot put it into automatic mode for scanning because it shuts down the computer 100% of the time.

Thinking back...this ALL started with the new AVG 8.0 program. I uninstalled 8.0 and reinstalled it a couple days after updating to the new version because of the blue screen thing...thinking the download was corrupted...went to a different site and redownloaded it...then I started getting the Klone P warnings so I figured it was a nasty virus doing all this

Is AVG 8.0 a problem?? If so, what's next? Should I delete spybot and adaware and see if that stops the shutdown? Delete and redownload AVG?

#4 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 04 June 2008 - 12:21 AM

Hi,

Previously Klone P virus showed up in BurnAware

This is a false positive:
http://forums.whirlpool.net.au/forum-repli...cfm/978339.html
Not sure if AVG deleted some files then, if so, please reinstall BurnAware again.

From what I read here, you get BSODs while performing scans... well, this rather looks like a hardware issue.
I'm sure you'll also get a BSOD while performing a disk defragmentation or anything else where it puts much stress on the cpu. Is this correct?
There could be several causes... bad sectors on your drive, a problem with the temperature, (dirt - dust between the cpu fan and other fans, so make sure they are spinning freely and there is a good airflow through the computer)

You can use Speedfan, a freeware program to monitor your voltages, fan speeds and temperatures.
http://www.almico.com/speedfan.php

Unfortunately, I don't really have much knowledge about hardware.. but I would check for sure if there is any dust/dirt present around your fans.

And since I am pretty sure this is a hardware issue here - It's better to start a new thread in the Hardware part of this forum.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#5 Stimp11

Stimp11
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 04 June 2008 - 06:12 PM

Actually, Disk Scan/Cleanup and defragmentation work fine. I performed each today just to make sure. I'll open up the tower and clean it-it's time to do that anyway.

The only time I get a blue screen and the computer shuts down is when I run AVG, Spybot or Adaware.

Lisa

#6 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 05 June 2008 - 12:09 AM

The only time I get a blue screen and the computer shuts down is when I run AVG, Spybot or Adaware.

Yes, but they are the only programs either that put a lot of stress on your cpu while scanning.
If you get the bsod, what error do you see?
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#7 Stimp11

Stimp11
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 05 June 2008 - 08:40 PM

A Blue Screen with lots of words. here's the main points:

Stop Error Screen

Check for BIOS updates

Disable BIOS memory options such as caching or shadowing

Errors:
GX000008E, 0xC0000005, 0x80569AA9, 0xF1446C40, 0x00000000

Beginning dump of physical memory...counts to 100 and shuts down


AVG decided to run a scan tonight even though I have disabled the automatic scan function and the BSOD appeared within 1 minute.

#8 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 06 June 2008 - 02:19 AM

Hi,

I suggest you start a new thread with that in the hardware forums. This is certainly a hardware issue :thumbsup:
But is it possible that this problem started after you installed AVG 8 ? Because I've seen many issues with it lately. What you can try is to temporary uninstall AVG and see if that solves the problem if you scan with other scanners....
This because, if you scan with another scanner, AVG scans the same files as well (realtime scanner).

Edited by miekiemoes, 06 June 2008 - 02:27 AM.

AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#9 Stimp11

Stimp11
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 10 June 2008 - 04:39 PM

Yes, everything started when i installed AVG...but now it is escalating (see below) and feels more like Hardware like you said...I will try uninstalling AVG while waiting for a reply in hardware.
AVG is the only virus protection I have. (I have spybt and adaware but I know they don't protect against viruses) Should I uninstall it and install something else? What would you recommend as I troubleshoot this whole mess!

I will also post in hardware b/c more things are starting to happen (blue screen occurs at random...not just during scan...once I got a bugcode_usb_driver error

Also, keboard shuts down in middle of typing. Also having issues shutting down computer (says windows is shutting down and never acutally powers off)

I'm very frustrated right now :thumbsup:

#10 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 10 June 2008 - 04:43 PM

Well, if it indeed started with AVG, then I suggest you uninstall it.
Don't forget to reboot afterwards. Who knows if that already solve your problems (since it may be an incompatibility issue with some other drivers).

There are still a lot of free alternatives out there. Take a look in my signature below under Antivirus for other free ones. For example Avira is a great free Antivirus.

I can imagine how frustrating you are - and this all after you installed AVG :thumbsup:
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#11 Stimp11

Stimp11
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 10 June 2008 - 05:34 PM

Thanks! I'll uninstall AVG and install something else. I know it could be coincidental that I installed the new AVG right before everything happened...I uninstalled and reinstalled it about a week later thinking that the file might have been corrupted somehow-but it dind't help.

I reinstalled my keyboard driver and today I have a fan blowing on the tower to keep it cooler (we live in a house w/o AC for the first time in years)

At this point I don't care what it is...as long as it is fixed!


Thanks for your help!

#12 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 11 June 2008 - 12:41 AM

Ok, let me know if you found the cause.... :thumbsup:

By the way, have you already measured the temperature?
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#13 Stimp11

Stimp11
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 11 June 2008 - 10:16 PM

ve not yet figured out how to use it...I opened installed the progrm but when I open the different screens I get nothing in the readings area.

#14 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:10:19 PM

Posted 12 June 2008 - 12:14 AM

That's strange - temperatures should be listed there.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users