Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Random XP Pro Freezes


  • This topic is locked This topic is locked
12 replies to this topic

#1 Artegal

Artegal

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:09:48 AM

Posted 12 March 2010 - 05:17 PM

Hi, all. I've been referred to this forum after working with Blade Zephon over in the "Am I Infected?" area. Apparently, I'm not infected :thumbsup: . Here's the link to that thread: Hanging XP.....

In a nutshell, I'm getting random system freezes, with or without Firefox or IE running, requiring a hard reboot. This can happen while working in an application, or with the system left idle (sometimes after just a few minutes, but other times I've left it up and running all night and found it to be fine the next am).

Since all this started, I've noticed that it takes fully 5-8 minutes after starting windows for the CPU to quit churning at 90-100%. Safe mode starts quickly, as usual. I have experienced at least one freeze in Safe Mode.

I'm running Zone Alarm's standalone firewall, and BitDefender 2010 antivirus. They don't play well together, so I've had to disable BD's real-time protection modes since installing BD 2010 back in the Fall of '09. Since the trouble I've been experiencing recently is reminiscent of problems I had after the BD2010 installation, I disabled it in startup 5-6 days ago. The vsmon.exe process is still running, however, and I continue to get the freezes.

Blade recommended re-installing any add-on hardware drivers, but I've already updated the video card driver (since the trouble started). The only other new hardware is a power supply and a Maxtor Blackarmor external drive (USB); the Maxtor website recommends against updating its firmware. I've removed it from startup, as well, just to see whether that would help. So far, it hasn't.

Thanks for taking a look at this; I'm perplexed.

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:48 AM

Posted 12 March 2010 - 07:04 PM

OK...let's see.

System manufacturer and model...if custom/self-built, motherboard manufacturer and model?

Size of hard drive...size of C: partition and amount of current free space on C:?

If you have freezes with no error messages...have you bothered to consider that maybe your system is overheating?

Cases, How to Avoid Overheating - http://www.hardwaresecrets.com/article/142

Cleaning the Interior of your PC - http://www.bleepingcomputer.com/tutorials/cleaning-the-inside-of-your-pc/

Have you run any diagnostics on your hard drive and/or your RAM?

ZA firewall, IME, causes problems for some systems. It's not the only or best firewall available that's free.

You haven't listed any error messages which support the premise of driver problems...driver problems normally produce BSODs and dump files.

BlueScreenView - http://www.nirsoft.net/utils/blue_screen_view.html

Download, install. Double-click BlueScreenView.exe file to run the program.

When scanning is done, Edit/Select All...then File/Save Selected Items. Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Louis

#3 Artegal

Artegal
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:09:48 AM

Posted 13 March 2010 - 02:16 PM

Thanks for the reply, Louis.

It's an Alienware custom full tower system from 2003. Intel D875PBZ motherboard.

Two 120GB 8MB cache serial ATA hard drives, running RAID 1. C: partition is 46.9GB; 21GB free space.

I have considered the overheating possibility, but the BIOS fan monitor states temps are OK, all fans are operational, and nothing feels hot.

I've kept the case interior pretty clean all along, but I spruced it up again when this trouble started. I've removed and re-seated my RAM sticks and cards and made sure their slots were free of dust.

I've run scandisk/checkdisk in Safe Mode (with the repair option enabled), defragmented all drives/partitions, and I've run memtest86 from a floppy (several passes, all clean). I ran system file check; it requested my installation CD (which I still have) and I let it finish with the CD in place. I didn't stick around for it, but it ran to completion.

Hanging XP..... details the rest of the stuff I've tried, so far. It also mentions some of the error messages I've gotten. They were happening earlier on, though. Haven't seen one in awhile.

Re: my firewall and AV, I'm invested in the paid versions of both--ZAPro and BD2010. I'd like to keep them at least until their year's subscription is up, if possible, but not at the expense of system stability. They seemed to be doing OK until recently, but clearly, if necessary, either or both can go.

Here's the BlueScreenView report:

==================================================
Dump File : Mini030610-01.dmp
Crash Time : 3/6/2010 11:31:18 AM
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
Parameter 1 : 0x001902fe
Parameter 2 : 0xaa6bf1e8
Parameter 3 : 0xaa6beee4
Parameter 4 : 0x804f3abe
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+dff0
File Description : NT File System Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2111)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\minidump\Mini030610-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini030510-01.dmp
Crash Time : 3/5/2010 7:08:28 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x805512e0
Parameter 3 : 0xb4b67ba4
Parameter 4 : 0x00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+7a2e0
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5913 (xpsp_sp3_gdr.091208-2036)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\minidump\Mini030510-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini030310-01.dmp
Crash Time : 3/3/2010 2:49:37 PM
Bug Check String : PFN_LIST_CORRUPT
Bug Check Code : 0x0000004e
Parameter 1 : 0x00000007
Parameter 2 : 0x0000a9bc
Parameter 3 : 0x00000002
Parameter 4 : 0x00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+6067a
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5913 (xpsp_sp3_gdr.091208-2036)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\minidump\Mini030310-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

Thanks again, for your help.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:48 AM

Posted 13 March 2010 - 04:28 PM

That STOP 24 error...indicates that there is a possibility that either your NTFS file system...or your hard drives...is a problem. I'd run the appropriate hard drive manufacturer's diagnostics on each.

The other two errrors don't really provide any clues to me, my guess would be one of your hard drives.

Last time you did a clean install?

I would also review Event Viewer for possible clues. Hard drive errors normally are reflected there, while NTFS issues may not necessarily be recognized except other than during chkdsk /r.

Louis

#5 Artegal

Artegal
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:09:48 AM

Posted 13 March 2010 - 06:38 PM

I've been checking Event Viewer regularly, both in System and Application. Early on, I often got the following in System, just before a hang:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/2/2010
Time: 11:00:39 AM
User: N/A
Computer: xxxxx
Description:
The V2i Protector service failed to start due to the following error:
The system cannot find the file specified.

Because I haven't used DriveImage (V2i Protector is part of that software) since right after I got the PC in '03, I removed DriveImage. Made no difference.

Here are representative Errors and Warnings I've gotten the past 2 days. I haven't noticed that they immediately precede a hang.

Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 3/13/2010
Time: 2:53:23 PM
User: N/A
Computer: xxxxxx
Description:
The master browser has received a server announcement from the computer JULIE-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B6ED309A-535C-435. The master browser is stopping or an election is being forced.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

(This one appears often. JULIE-PC is my wife's laptop; we share a wi-fi connection, but there's no file sharing. Should I be suspicious??? ;) )



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/13/2010
Time: 6:24:49 AM
User: N/A
Computer: xxxxx
Description:
The TrueVector Internet Monitor service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 3/13/2010
Time: 6:24:49 AM
User: N/A
Computer: xxxxxx
Description:
Timeout (30000 milliseconds) waiting for the TrueVector Internet Monitor service to connect.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.





Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 3/12/2010
Time: 6:40:21 PM
User: N/A
Computer: xxxxxx
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........




In the Application viewer:

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 3/12/2010
Time: 1:44:28 PM
User: N/A
Computer: xxxxxxx
Description:
Fault bucket 1554772798.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 35 35 34 37 37 32 37 15547727
0010: 39 38 0d 0a 98..



Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 3/12/2010
Time: 1:44:24 PM
User: N/A
Computer: xxxxxxxxx
Description:
Faulting application backgrounddownloader.exe, version 2.2.0.1092, faulting module backgrounddownloader.exe, version 2.2.0.1092, fault address 0x0002c0dc.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 62 61 63 ure bac
0018: 6b 67 72 6f 75 6e 64 64 kgroundd
0020: 6f 77 6e 6c 6f 61 64 65 ownloade
0028: 72 2e 65 78 65 20 32 2e r.exe 2.
0030: 32 2e 30 2e 31 30 39 32 2.0.1092
0038: 20 69 6e 20 62 61 63 6b in back
0040: 67 72 6f 75 6e 64 64 6f grounddo
0048: 77 6e 6c 6f 61 64 65 72 wnloader
0050: 2e 65 78 65 20 32 2e 32 .exe 2.2
0058: 2e 30 2e 31 30 39 32 20 .0.1092
0060: 61 74 20 6f 66 66 73 65 at offse
0068: 74 20 30 30 30 32 63 30 t 0002c0
0070: 64 63 0d 0a dc..


Had a hang this afternoon while watching a Youtube video. Simultaneously, there was a steady beep from the motherboard. Only other time that's happened was while I was trying to do something in Safe Mode about a week ago. Both times, on rebooting, POST was normal, with a single beep.

This is probably all just random stuff, but I'm hoping you'll catch something that might provide a clue.

I've, um, never mustered the courage to do a clean install. Guess I could.....if I must.

I'll check the Seagate website for info on disc diagnostics and give those a try. And I'll run chkdsk /r and post what I find.

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:48 AM

Posted 13 March 2010 - 07:00 PM

Well...V2i Protector doesn't seem to me to be part of Drive Image, seems like a separate application by Powerquest.

FWIW: I use DI 2002, the last real Powerquest product. All others after that are really Symantec products.

http://www.symantec.com/press/powerquest/pq092203.html

You may want to look at http://service1.symantec.com/SUPPORT/power....nsf&view=0

True Vector Internet Monitor...Zone Alarm. You may want to uninstall it and then reinstall or use a different firewall.

I would also uninstall the Blizzard software, backgrounddownloader.exe. Whether you reinstall is up to you.

If you are downloading/installing torrents...you elevate the risk of system infection, IMO. So...that should always be your first suspect when things go wrong.

The other errors you posted from Event Viewer...are normal.

<<Had a hang this afternoon while watching a Youtube video. Simultaneously, there was a steady beep from the motherboard.>>

You would have to consult your motherboard manual/documentation...to find out what that's about. May be an overheating warning, may be something else.

Louis

Edited by hamluis, 13 March 2010 - 07:00 PM.


#7 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,735 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:48 AM

Posted 13 March 2010 - 07:20 PM

From your other thread:

found backdoor Sinowal and Trojan Mebroot

There is a good chance the above nasties were not completely cleaned by MBAM and SAS.

With the information you have provided I believe you will need help from the malware removal team. I would like you to start a new thread and post a DDS log HERE and include a link to this thread. Please make sure that you read the information about getting started before you start your thread.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient. Help is on the way!

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#8 Artegal

Artegal
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:09:48 AM

Posted 14 March 2010 - 12:36 AM

Louis,

Here's where I am at this point.

I've downloaded and run the quicker of the Seagate hard drive diagnostics, and both C and D drives passed. I plan to run the longer tests and chkdsk /r overnight.

V2i Protector Agent or Console (I don't remember which) was one of the drop-down menu options when I clicked on Start->Run->Powerquest DriveImage 7. Whether it was part of that program, or separate, I don't know, but I suspect it was installed as part of the DriveImage package (which I still have and may re-install, at some point, if my current difficulties resolve).

Thanks for the Powerquest links. I tried the V2i Protector RegClean.exe program, and it found nothing to remove, so I guess it's gone.

I uninstalled ZoneAlarm Pro. The ZA Uninstall button wouldn't work (I'm running as Admin), so I had to do it manually, in Safe Mode, per instructions from ZoneAlarm's support site. I'll hold off on reinstalling, to see whether problems persist without it. For now, I'll run Windows Firewall (I'm also behind a router).

BitDefender 2010 is still up. Now that ZA's gone, I've re-enabled it's real-time protection.

I plan to uninstall backgrounddownloader.exe after I check Blizzard support to be sure that's the only file to remove and to find out how to manually download patch info.

I haven't yet found any info on the meaning of motherboard beeps outside the POST environment (i.e., after Windows is up and running). I know that the BIOS hardware monitoring temps are not very accurate, but it's telling me that the CPU area temp is ~101 degrees F. Shouldn't that be OK, even within several degrees range of error? I've felt around the heat sinks, too, and nothing feels hot.

So, I'm off to bed, after I start chkdsk /r. I'll post what I find in the am. I'll take Broni's advice, too, and open a thread with a DDS log tomorrow.

Thanks again.



Edit: Chkdsk /r went more quickly than I thought it would--so quickly that I couldn't read everything it said. I didn't see anything obviously worrisome, but I can't be sure. I had it set to check both C: and D: drives on reboot. It checked D: first, then C:. Then it checked D: again before booting into Windows. Any way to access a log of what it found?

Edited by Artegal, 14 March 2010 - 01:06 AM.


#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:48 AM

Posted 14 March 2010 - 08:01 AM

Run the long test for the hard drive...the short test is not exhaustive and I really don't advise anyone to use it when hard drive problems are a possibility.

The fact that chkdsk /r ran twice...is unusual. Unusual when discussing repair techniques is usually a bad indicator.

The ckkdsk log can be found in Event Viewer, Application tab, Winlogon is the source, EventID 1001.

Louis

#10 Artegal

Artegal
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:09:48 AM

Posted 14 March 2010 - 02:15 PM

I ran the short and long tests, both Seagate specific and generic, for both C: and D: and they passed all tests.

Here are the chkdsk logs:


Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 3/14/2010
Time: 12:54:13 AM
User: N/A
Computer: xxxxxx
Description:
Checking file system on D:
The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.
Cleaning up 7 unused index entries from index $SII of file 0x9.
Cleaning up 7 unused index entries from index $SDH of file 0x9.
Cleaning up 7 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.

61159423 KB total disk space.
5924804 KB in 16708 files.
4972 KB in 1105 indexes.
0 KB in bad sectors.
87967 KB in use by the system.
65536 KB occupied by the log file.
55141680 KB available on disk.

4096 bytes in each allocation unit.
15289855 total allocation units on disk.
13785420 allocation units available on disk.

Internal Info:
7e 48 00 00 a1 45 00 00 4f 56 00 00 00 00 00 00 ~H...E..OV......
46 00 00 00 00 00 00 00 a1 00 00 00 00 00 00 00 F...............
bc a0 65 01 00 00 00 00 c6 0d 81 05 00 00 00 00 ..e.............
78 14 9a 01 00 00 00 00 00 00 00 00 00 00 00 00 x...............
00 00 00 00 00 00 00 00 a6 e6 7c 0f 00 00 00 00 ..........|.....
70 b0 5e b2 00 00 00 00 e8 3d 07 00 44 41 00 00 p.^......=..DA..
00 00 00 00 00 10 9f 69 01 00 00 00 51 04 00 00 .......i....Q...
Checking file system on D:
The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Windows has checked the file system and found no problems.

61159423 KB total disk space.
5924808 KB in 16709 files.
4972 KB in 1105 indexes.
0 KB in bad sectors.
87967 KB in use by the system.
65536 KB occupied by the log file.
55141676 KB available on disk.

4096 bytes in each allocation unit.
15289855 total allocation units on disk.
13785419 allocation units available on disk.

Internal Info:
7e 48 00 00 a2 45 00 00 50 56 00 00 00 00 00 00 ~H...E..PV......
46 00 00 00 00 00 00 00 9a 00 00 00 00 00 00 00 F...............
ae 79 5e 01 00 00 00 00 04 22 75 05 00 00 00 00 .y^......"u.....
9a da 7f 01 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 44 d5 4a 0f 00 00 00 00 ........D.J.....
80 d7 5e b2 00 00 00 00 e8 3d 07 00 45 41 00 00 ..^......=..EA..
00 00 00 00 00 20 9f 69 01 00 00 00 51 04 00 00 ..... .i....Q...


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 3/14/2010
Time: 12:54:13 AM
User: N/A
Computer: xxxxxx
Description:
Checking file system on C:
The type of the file system is NTFS.


A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 1073 unused index entries from index $SII of file 0x9.
Cleaning up 1073 unused index entries from index $SDH of file 0x9.
Cleaning up 1073 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.

49271323 KB total disk space.
26404984 KB in 83488 files.
30664 KB in 9913 indexes.
0 KB in bad sectors.
206055 KB in use by the system.
65536 KB occupied by the log file.
22629620 KB available on disk.

4096 bytes in each allocation unit.
12317830 total allocation units on disk.
5657405 allocation units available on disk.

Internal Info:
30 8c 01 00 e4 6c 01 00 08 12 02 00 00 00 00 00 0....l..........
c5 04 00 00 02 00 00 00 b4 0d 00 00 00 00 00 00 ................
cc b2 89 06 00 00 00 00 10 af 8d 3f 00 00 00 00 ...........?....
ae a3 d3 16 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 5c b7 df 66 00 00 00 00 ........\..f....
70 b0 5e b2 00 00 00 00 e8 3d 07 00 20 46 01 00 p.^......=.. F..
00 00 00 00 00 e0 a1 4b 06 00 00 00 b9 26 00 00 .......K.....&..

Windows has finished checking your disk.
Please wait while your computer restarts.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



That was all I found.

Got a hang just before I posted my last reply early this am, but the system ran all night (and so far, today) doing the disk checks, without a hitch. We'll see how it does with DDS and GMER.

#11 Artegal

Artegal
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:09:48 AM

Posted 14 March 2010 - 09:34 PM

Well, I opened this topic today, as Broni suggested: Trouble with backdoor Sinowal and trojan Mebroot.

I've run through the suggestions in About getting started....

My troubles persist.

I'll check back to see if you've had more thoughts. Thanks very much for all your help, so far.

#12 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,735 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:48 AM

Posted 14 March 2010 - 09:56 PM

I opened this topic today, as Broni suggested: Trouble with backdoor Sinowal and trojan Mebroot.

Now, you have to get your computer checked there and we'll see how it goes.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#13 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:48 AM

Posted 14 March 2010 - 10:25 PM

Now that you have a log posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Removal Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the Malware Removal Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another Malware Removal Team member is already assisting you and not open the thread to respond.

To avoid confusion, I am closing this topic.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users