Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

initalize command c0000033 why does the blue screen of death come up with this at startup


  • This topic is locked This topic is locked
40 replies to this topic

#1 Bucka

Bucka

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:02 AM

Posted 17 February 2010 - 06:14 PM

Greetings Im new here and did search the site for initalizecommand c0000033

I recently got a malware virus which would only show a fake ad on startup for a subscrition to some removal site btw norton 360 did not detect it.
I appologise i cant post a malwarebytes log as it didnt save it for some reason but the instructions im sure were from this site run malwarebytes then combo fix. and first install windows recovery console which i did.

I regained control of my desktop but now at start up win xp splash goes through then a blue win xp screen with following appears initalizecommand c0000033 then it appears to load as normal i followed some instructions to remove the console from the root directory but it has not fixed the problem any suggestions or help appreciated

Windows HE V2002 SP3
Regards Bucka wacko.gif

Edited by Pandy, 18 February 2010 - 01:09 PM.
Moved from Win XP Home and Pro ~Pandy


BC AdBot (Login to Remove)

 


#2 Guest_joelj1964_*

Guest_joelj1964_*

  • Guests
  • OFFLINE
  •  

Posted 17 February 2010 - 06:34 PM

Thanks for posting your question. Go to Control Panel > Administrative Tools > Event viewer. In the left hand column select "System". Locate any error messages. Double click on the error message(s) to display the contents. Copy and paste the error message(s) in your post.

Thanks, Joel

Edited by joelj1964, 17 February 2010 - 06:35 PM.


#3 Bucka

Bucka
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  

Posted 17 February 2010 - 07:55 PM

Thanks Joel,
Excuse my ignorance please
When i double click the error a box comes up with event properties and a detailed description if i highlite text and right click it only gives me a windows whats this default no copy or paste ?

Regards Bucka

#4 Guest_joelj1964_*

Guest_joelj1964_*

  • Guests
  • OFFLINE
  •  

Posted 17 February 2010 - 08:08 PM

This is not your ignorance, but rather my neglect to instruct you. I apologize for that. When you double click the error message the properties window appears. On properties window there is a button which when clicked will copy the contents to your clip board. The picture below displays the button with the red box around it. Once you click on the button you can simply paste the text in your reply simply by right clicking and selecting paste. Again, I apologize for the lack of instructions.

Thanks, Joel



#5 Bucka

Bucka
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:02 AM

Posted 17 February 2010 - 08:31 PM

Thank You again Joel,
Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 18/02/2010
Time: 8:50:10 AM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ......
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 34
Date: 20/01/2003
Time: 2:13:37 PM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
The time service has detected that the system time needs to be changed by +223344001 seconds. The time service will not change the system time by more than +54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|10.0.0.1:123->207.46.232.182:123) is working properly.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: PlugPlayManager
Event Category: None
Event ID: 257
Date: 15/02/2010
Time: 11:20:42 AM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
Timed out sending notification of target device change to window of "PNPNOTIFICATIONRECEIVER_28AF7B8"

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 12/02/2010
Time: 1:43:15 PM
User: NT AUTHORITY\SYSTEM
Computer: USER-QNCSDQUVH3
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 12/02/2010
Time: 11:46:51 AM
User: USER-QNCSDQUVH3\Administrator
Computer: USER-QNCSDQUVH3
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/02/2010
Time: 11:45:37 AM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
The following boot-start or system-start driver(s) failed to load:
BANTExt
BHDrvx86
ccHP
eeCtrl
Fips
IDSxpx86
intelppm
SRTSPX
SYMTDI

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 12/02/2010
Time: 11:44:44 AM
User: USER-QNCSDQUVH3\Administrator
Computer: USER-QNCSDQUVH3
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/02/2010
Time: 11:31:26 AM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
The following boot-start or system-start driver(s) failed to load:
BANTExt
BHDrvx86
ccHP
eeCtrl
Fips
IDSxpx86
intelppm
SRTSPX
SYMTDI

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Date: 12/02/2010
Time: 10:07:39 AM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1f 00 00 00 ....

Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 7
Date: 12/02/2010
Time: 9:40:19 AM
User: N/A
Computer: USER-QNCSDQUVH3
Description:
The device, \Device\CdRom0, has a bad block.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b8 00 ..h....
0008: 00 00 00 00 07 00 04 c0 .......
0010: 00 01 00 00 9c 00 00 c0 ......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 b8 00 00 00 00 00 00 .......
0028: 86 3b 06 00 00 00 00 00 ;......
0030: ff ff ff ff 01 00 00 00 ....
0038: 40 00 00 c4 02 00 00 00 @......
0040: 00 20 0a 12 48 02 00 40 . ..H..@
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 d0 74 c8 82 ....tȂ
0058: 00 00 00 00 88 a8 e1 82 ....
0060: 02 00 00 00 17 00 00 00 ........
0068: 28 00 00 00 00 17 00 00 (.......
0070: 01 00 00 00 00 00 00 00 ........
0078: 70 00 03 00 00 00 00 0a p.......
0080: 00 00 00 00 11 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Joel theres a few others but look like duplicates to these ?

Im assuming the date one was myself I couldnt boot the bios settings so i tried to trick the pc by back dating it it did not work btw.
Kind Regards Bucka

#6 Guest_joelj1964_*

Guest_joelj1964_*

  • Guests
  • OFFLINE
  •  

Posted 18 February 2010 - 12:17 PM

The first error message (TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts) is a warning that a malicious program or a virus might be running on the system. I am recommending this topic be moved to the appropriate forum.

Thanks, Joel

#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,252 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania

Posted 18 February 2010 - 01:24 PM

Hello there,

Lets see if we can clear up a few things here.

QUOTE
but the instructions im sure were from this site run malwarebytes then combo fix. and first install windows recovery console which i did.
BleepingComputer NEVER recommends to run Combofix, except when you are being helped by a trained helper.

Please note: ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert." It is NOT for unsupervised use. Please read Combofix's Disclaimer.

Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.

QUOTE
i followed some instructions to remove the console from the root directory but it has not fixed the problem
Its better not to try to uninstall the Recovery Console. It doesn't do any harm when not used and it can come in really handy, for example when your computer for some reason cannot boot at all.

QUOTE
The first error message (TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts) is a warning that a malicious program or a virus might be running on the system.
This is indeed Microsofts idea for the limit. However, this warning is seen often when someone is using p2p applications. This does not mean you are infected automatically. However, keep in mind the following:
  • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a smrgsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.
  • Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
  • The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.
It is pretty much certain that if you continue to use P2P programs, you will get infected again.


Now all that is settled, can you let me know what problems, besides the error at boot, you still have?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#8 Bucka

Bucka
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:02 AM

Posted 18 February 2010 - 04:52 PM

Thank You Elise,
The problem I have still is initalizecommand c0000033
appears after the xp screen in a blue screen with xp on it.
The pc also beeps from the internal speaker once then again at another point is it correct to assume this is a bios issue.

Thank you for your reply
Kind Regards Bucka

#9 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,252 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania

Posted 19 February 2010 - 02:27 AM

That sounds indeed like some hardware problem might be causing this, however it is difficult to say.

Please download ConflictInfo by aommaster to your desktop.
  1. Double click

  2. Press to begin.

  3. It shall produce a ConflictInfo.txt on your desktop.

  4. Please copy and paste the log in your next reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#10 Bucka

Bucka
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:02 PM

Posted 20 February 2010 - 07:20 PM

Thanks Elise,

Logfile of Aommaster's ConflictInfo v.1.0.0
#############
Conflicting Devices
#############

===No device problems found===

~~~EOF~~~

Regards Bucka

#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,252 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:02 AM

Posted 21 February 2010 - 04:09 AM

QUOTE
The pc also beeps from the internal speaker once then again at another point is it correct to assume this is a bios issue.
Can you explain when this beep occurs and did it always beep or only after the other problem started?

Please let me know what your computer manufacturer/model/make/number is (so I can look up the beep code).

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 Bucka

Bucka
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:02 PM

Posted 21 February 2010 - 04:56 PM

Thanks Elise,

System Model
Windows XP Home Edition Service Pack 3 (build 2600) MICRO-STAR INC. MS-6728 2.00
Processor a Main Circuit Board b
3.00 gigahertz Intel Pentium 4
16 kilobyte primary memory cache
1024 kilobyte secondary memory cache Board: MICRO-STAR INC. MS-6728 2.00
Bus Clock: 200 megahertz
BIOS: American Megatrends Inc. V3.5 02/05/2004

The first single beep has been there for some time and appears soon after boot up and then displays a type of ad screen for micro star core cell then it vanishes

Then a black screen another single beep which was never there then it goes to the windows xp logo and splash
Then the blue screen initilizecommand c0000033.
Regrds Bucka

#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,252 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:02 AM

Posted 22 February 2010 - 02:42 AM

Hello,

I looked at this site and found the beep code you described most likely as a RAM failure problem. However this article describes also MoBo led error codes, so maybe (depending on your computer skills) you can have a look there.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 Bucka

Bucka
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:02 PM

Posted 23 February 2010 - 04:36 PM

Elise Thanks again,

I have managed to fix the boot up beeps thank you for the info.
However I still have the pesky blue screen come up initilizecommand c0000033

any thoughts ?
Regards Bucka crazy.gif

#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,252 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:02 AM

Posted 24 February 2010 - 03:09 AM

Hi, out of curiosity, can you tell me what caused the beep?

As for the error code, does this also happen when all external device except for keyboard and mouse are disconnected (USB flash drives, printers, webcams, ....)?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users