Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

xp problems


  • Please log in to reply
39 replies to this topic

#1 BakedDaily

BakedDaily

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 10:25 AM

Hello im running windows xp professional 2002 service pack 3 and i have a few issues with the machine locking up and being kind of slow , and making continuous beeping after running for many hours .
I have already check my cpu temp and made sure all my bios settings are set to default settings specified by my book that came with the board .
I have followed all of the steps in the forums for slow computer already and did not help . Mole a current HJT team member has ensured that i do not have any type of virus/malware running on my computer here is the thread (http://www.bleepingcomputer.com/forums/topic275579.html). I was told to come here for the remainder of my issues hoping that my computer can be successfully cured .
I follow instructions good and will await the help of anyone is is available .

Edited by BakedDaily, 06 December 2009 - 10:27 AM.


BC AdBot (Login to Remove)

 


#2 joseibarra

joseibarra

  • Members
  • 1,254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Downstairs
  • Local time:04:29 AM

Posted 06 December 2009 - 10:52 AM

Please provide additional information about your system.

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select All, Copy and then paste
the information back here.

There will be some personal information (like System Name and User Name), and whatever appears to
be private information to you, just delete it from the pasted information.

This will minimize back and forth Q&A and eliminate guesswork.


I am looking at your other post and one of the "frightening" things to me is that you have the Ask Toolbar installed. Unless they have fixed it lately, it is a troublemaker as it likes to delete the boot.ini file and some other things. That may not keep your system from booting or causing your immediate issues, but that is jumping out at me.

One log shows you have a boot.ini which is a little surprising to me.

I would completely uninstall the Ask Toolbar and reboot. You can always reinstall it later.

Is Ask Toolbar that something you installed lately?

The mediocre teacher tells. The good teacher explains. The superior teacher demonstrates.


#3 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 11:24 AM

I can unistall it i dont use the stupid tool bar anways im not sure when it was installed i can try to find out tho.

OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 3 Build 2600
OS Manufacturer Microsoft Corporation
System Name CHRIS
System Manufacturer Gigabyte Technology Co., Ltd.
System Model P35-DQ6
System Type X86-based PC
Processor x86 Family 6 Model 15 Stepping 2 GenuineIntel ~2004 Mhz
BIOS Version/Date Award Software International, Inc. F4, 5/11/2007
SMBIOS Version 2.4
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.5512 (xpsp.080413-2111)"
User Name CHRIS-
Time Zone Central Standard Time
Total Physical Memory 2,048.00 MB
Available Physical Memory 1.40 GB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.88 GB
Page File Space 3.85 GB
Page File C:\pagefile.sys

#4 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 11:34 AM

ok ask tool bar has been deleted and i had restarted my computer

#5 joseibarra

joseibarra

  • Members
  • 1,254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Downstairs
  • Local time:04:29 AM

Posted 06 December 2009 - 12:02 PM

Good. I will have to install it again some day to see if they fixed it yet. The Ask Toolbar likes to delete:

boot.ini
AUTOEXEC.BAT
CONFIG.SYS
all folders that start with "@" in its name in the boot drive "C"

Has your system always been afflicted like this or do you think it just started after something new (hardware or software) you may have installed lately?

Do you use your system much for intense/online gaming?

For lock ups, one thing I found to help find the culprit is to force a BSOD when your system is locked up. It is not as scary as it looks. This will create a memory dump file and upon examination, you will be able to determine what was running at the time of the lock up and start pointing fingers.

I don't have the directions written down yet, but you can read about how to force a BSOD here:

http://www.psacake.com/web/jr.asp

Backup your registry before making any changes using this popular free tool:

http://www.larshederer.homepage.t-online.de/erunt/

Installing the MS stuff to examine a dump file is time consuming and I already have it all set up once I get a dump file or you can work on it yourself.

Unfortunately, I will probably not be any help for the next day or so, but somebody else may be able to take a look at it or offer ideas about other things you can be doing in the meantime.

At the next lock up, force a BSOD to create the crash dump file and reboot.

Look in c:\windows\minidump for a file called minidump.dmp with a current date and time (delete any others if you don't need them) and upload the correct one here as an attachment to a post.

I know you already ran MBAM, but I would run SAS also:

Download, install, update and do a full scan with these free malware detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

I would also check your drivers to be sure you have the latest from the manufacturers WWW site:

http://www.gigabyte.us/Products/Motherboar...?ProductID=2637

If you have installed a third party graphics card, what is it and check the drivers for that from the manufacturers WWW site.

If you are not sure about driver updates, ask.

The mediocre teacher tells. The good teacher explains. The superior teacher demonstrates.


#6 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 12:09 PM

I have already done driver updates usingdriver max and checking with all manufacturers of my mother board cpu and gpu i do use my computer for gaming but not alot i only beening playing bf2 and the rest r low requirement games aka starcraft dk2 i like the oldies .... i can go ahead and force the mem dump but i am sure i do not have any type of malware /spyware or trojans Mole can verify this .

#7 joseibarra

joseibarra

  • Members
  • 1,254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Downstairs
  • Local time:04:29 AM

Posted 06 December 2009 - 12:21 PM

The best you can honestly say about malicious software is: The scans I have run so far do not detect anything.

It does not mean you do not have malicious software :thumbsup: I will have to look at your other stuff more later - it will not hurt to run SAS.

Look in the Event Viewer for clues around the time of the failure:

Here is a method to post the specific information about individual events.

To see the Event Viewer logs, click Start, Settings, Control Panel, Administrative Tools, Event Viewer.

A shortcut to Event Viewer is to click Start, Run and in the box enter:

%SystemRoot%\system32\eventvwr.msc /s

Click OK to launch the Event Viewer.

The most interesting logs are usually the Application and System. Some logs may be almost or completely empty.
Not every event is a problem, some are informational messages that things are working okay and some are warnings.
No event should defy reasonable explanation.

Each event is sorted by Date and Time. Errors will have red Xs, Warnings will have yellow !s.
Information messages have white is. Not every Error or Warning event means there is a serious issue.
Some are excusable at startup time when Windows is booting. Try to find just the events at the date
and time around your problem.

If you double click an event, it will open a Properties windows with more information. On the right are
black up and down arrow buttons to scroll through the open events. The third button that looks like
two pages on top of each other is used to copy the event details to your Windows clipboard.

When you find an interesting event that occurred around the time of your issue, click the third button
under the up and down arrows to copy the details and then you can paste the details (right click, Paste
or CTRL-V) the detail text back here for analysis.

To get a fresh start on any Event Viewer log, you can choose to clear the log (backing up the log is offered),
then reproduce your issue, then look at just the events around the time of your issue.

The mediocre teacher tells. The good teacher explains. The superior teacher demonstrates.


#8 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 12:32 PM

ok im about to run the dump and sas
i will be back in a few mins

#9 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 01:01 PM

i cannot open or post the dmp file can ya tell me how to fix that?

#10 OldGrumpyBastard

OldGrumpyBastard

  • Members
  • 781 posts
  • OFFLINE
  •  
  • Location:"Way South of 'da Bridge"
  • Local time:03:29 AM

Posted 06 December 2009 - 01:21 PM

Instructions for posting and analysing BSOD'S...

http://www.bleepingcomputer.com/forums/t/176011/how-to-receive-help-diagnosing-blue-screens-and-windows-crashes/
Does this look like an OldGrumpyBastard or what?

#11 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 01:51 PM

ok i ran sas and found a some cookies and registry entries that were fixed and i opened event viewer and found that crypt32 has an error everytime i restart me pc .... and GUSVC has an error too (googleupdateservice)
I think that spysweeper (by webroot) has an error retreving updates
but im not sure what time the system failed and nothing other then what i posted above is in the error list
ok im going to try to open that dmp log will post back in a few mins

Edited by BakedDaily, 06 December 2009 - 02:03 PM.


#12 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 02:00 PM

ok here is the mem dump thanks to the OGB
Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini120609-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090804-1435
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sun Dec 6 11:45:56.937 2009 (GMT-6)
System Uptime: 0 days 0:00:33.671
Loading Kernel Symbols
...............................................................
.............................................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck E2, {0, 0, 0, 0}

Probably caused by : i8042prt.sys ( i8042prt!I8xProcessCrashDump+237 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MANUALLY_INITIATED_CRASH (e2)
The user manually initiated this crash dump.
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


BUGCHECK_STR: MANUALLY_INITIATED_CRASH

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: Idle

LAST_CONTROL_TRANSFER: from b77d47fb to 804f9f43

STACK_TEXT:
b84d3c38 b77d47fb 000000e2 00000000 00000000 nt!KeBugCheckEx+0x1b
b84d3c54 b77d4033 0089f7c8 018ef1c6 00000000 i8042prt!I8xProcessCrashDump+0x237
b84d3c9c 805456a5 8a65b270 8a89f710 01010008 i8042prt!I8042KeyboardInterruptService+0x21c
b84d3c9c b82ea162 8a65b270 8a89f710 01010008 nt!KiInterruptDispatch+0x45
b84d3d50 80545d4c 00000000 0000000e 00000000 intelppm!AcpiC1Idle+0x12
b84d3d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x10


STACK_COMMAND: kb

FOLLOWUP_IP:
i8042prt!I8xProcessCrashDump+237
b77d47fb 5d pop ebp

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: i8042prt!I8xProcessCrashDump+237

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: i8042prt

IMAGE_NAME: i8042prt.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 48025c67

FAILURE_BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+237

BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+237

Followup: MachineOwner
---------

#13 hamluis

hamluis

    Moderator


  • Moderator
  • 56,261 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:29 AM

Posted 06 December 2009 - 03:04 PM

FWIW: http://www.bleepingcomputer.com/filedb/i80...t.sys-1057.html.

Probably damaged...I'd try uninstalling/replacing.

Louis

#14 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 05:55 PM

i believe that is were i created the registry key to make computer to create a dump file ....

#15 BakedDaily

BakedDaily
  • Topic Starter

  • Members
  • 123 posts
  • OFFLINE
  •  
  • Local time:04:29 AM

Posted 06 December 2009 - 08:19 PM

i also keep getting promted to install internet explorer 8 and it has already been installed ....




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users