Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

comp keeps freezing


  • Please log in to reply
11 replies to this topic

#1 adamb103

adamb103

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:50 AM

Posted 04 January 2011 - 12:55 PM

It freezes real fast, but works pretty well in safe mode.

I've done malware scans and nothing comes up; I ran Wise reg fixer and that didn't help.

If you have any ideas I'd really appreciate it.

Thanks BC

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:50 AM

Posted 04 January 2011 - 09:00 PM

I ran Wise reg fixer


Registry cleaners/optimizers are not recommended for several reasons:

  • Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

    The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.
  • Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.
  • Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.
  • Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.
  • The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results".
Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.


============================================================================================================

Please download VEW and save it to your Desktop: http://images.malwareremoval.com/vino/VEW.exe

Double-click VEW.exe then under Select log to query, select:
Application
System


Under Select type to list, select:
Critical (Vista only)
Error


Click the radio button for Number of events
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

In Notepad, click Edit > Select all then Edit > Copy
Reply to this post, click in the reply window and press Ctrl+V on your keyboard to paste the log.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 adamb103

adamb103
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:50 AM

Posted 05 January 2011 - 02:32 AM

Vino's Event Viewer v01c run on Windows Vista in English
Report run at 05/01/2011 2:30:29 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 24/05/2010 10:35:12 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:12 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:13 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:13 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:14 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:14 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:15 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:16 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:16 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:35:19 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 10:38:14 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:24:07 PM
Type: Error Category: 3
Event: 3013 Source: Microsoft-Windows-Search
The entry <C:\USERS\MARC\DOCUMENTS\ADAM\UM LAW\EVIDENCE\WEEK 1.DOCX> in the hash map cannot be updated.

Context: Application, SystemIndex Catalog

Details:
A device attached to the system is not functioning. (0x8007001f)


Log: 'Application' Date/Time: 24/05/2010 11:40:48 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:40:48 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:41:04 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:41:04 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:43:48 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:43:48 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:46:04 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

Log: 'Application' Date/Time: 24/05/2010 11:46:04 PM
Type: Error Category: 0
Event: 11 Source: Microsoft-Windows-CAPI2
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. .

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 26/10/2010 9:04:12 PM
Type: Error Category: 0
Event: 1002 Source: Microsoft-Windows-Dhcp-Client
The IP address lease 10.221.9.11 for the Network Card with network address 001F3BD3DB41 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

Log: 'System' Date/Time: 26/10/2010 9:12:13 PM
Type: Error Category: 0
Event: 6008 Source: EventLog
The previous system shutdown at 5:04:00 PM on 10/26/2010 was unexpected.

Log: 'System' Date/Time: 26/10/2010 9:12:15 PM
Type: Error Category: 0
Event: 15016 Source: Microsoft-Windows-HttpEvent
Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

Log: 'System' Date/Time: 26/10/2010 9:12:37 PM
Type: Error Category: 0
Event: 1002 Source: Microsoft-Windows-Dhcp-Client
The IP address lease 10.221.9.11 for the Network Card with network address 001F3BD3DB41 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

Log: 'System' Date/Time: 26/10/2010 9:12:43 PM
Type: Error Category: 2
Event: 55 Source: Ntfs
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume OS.

Log: 'System' Date/Time: 26/10/2010 9:13:35 PM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The Windows Defender service terminated with the following error: The specified image file did not contain a resource section.

Log: 'System' Date/Time: 26/10/2010 9:13:35 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Log: 'System' Date/Time: 26/10/2010 9:13:35 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Log: 'System' Date/Time: 26/10/2010 9:13:35 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 26/10/2010 9:13:58 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Log: 'System' Date/Time: 26/10/2010 9:13:58 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 26/10/2010 9:14:50 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Log: 'System' Date/Time: 26/10/2010 9:14:50 PM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 3 time(s).

Log: 'System' Date/Time: 26/10/2010 9:46:37 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Log: 'System' Date/Time: 26/10/2010 9:46:37 PM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 4 time(s).

Log: 'System' Date/Time: 26/10/2010 10:11:48 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Log: 'System' Date/Time: 26/10/2010 10:11:48 PM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 5 time(s).

Log: 'System' Date/Time: 26/10/2010 11:08:23 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Log: 'System' Date/Time: 26/10/2010 11:08:23 PM
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 6 time(s).

Log: 'System' Date/Time: 26/10/2010 11:16:15 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:50 AM

Posted 05 January 2011 - 07:11 PM

First of all, you have a lot of these errors:
Event: 11 Source: Microsoft-Windows-CAPI2

Try this fix and see, if it'll help: http://support.microsoft.com/kb/2328240

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 adamb103

adamb103
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:50 AM

Posted 06 January 2011 - 02:25 AM

No, that didn't do it... anything else that causes that sort of issue/plan B?

Thanks again, Broni

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:50 AM

Posted 06 January 2011 - 06:14 PM

Download Autoruns for Windows: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
No installation required.
Simply unzip Autoruns.zip file, and double click on autoruns.exe file to run the program.
Go File>Save, and save it as AutoRuns.txt file to know location.
You must select Text from drop-down menu as a file type:

Posted Image

Attach the file to your next reply.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#7 adamb103

adamb103
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:50 AM

Posted 07 January 2011 - 01:45 PM

Here is the .txt

thank you

Attached Files



#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:50 AM

Posted 07 January 2011 - 04:45 PM

Go Start>Run (Start Search in Vista), type in:
msconfig
Click OK (hit Enter in Vista).

Click on Startup tab.
Click Disable all
IMPORTANT! In case of laptop, make sure, you do NOT disable any keyboard, or touchpad entries.

Click Services tab.
Put checkmark in Hide all Microsoft services
Click Disable all.

Click OK.
Restart computer in Normal Mode.

NOTE. If you use different firewall, than Windows firewall, turn Windows firewall on, just for this test, since your regular firewall won't be running.
If you use Windows firewall, you're fine.

Same problem?

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#9 adamb103

adamb103
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:50 AM

Posted 07 January 2011 - 06:42 PM

yep, still freezes

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:50 AM

Posted 07 January 2011 - 08:17 PM

Go back to "msconfig" and re-enable all items, you just disabled.
That was for testing purposes only.

Download System Information for Windows (SIW free version)
No installation required.

After it scans your computer, navigate to Hardware>Sensors and post all info from there.

Posted Image

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#11 adamb103

adamb103
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:50 AM

Posted 07 January 2011 - 09:05 PM

Thanks, Broni

Sensor Value Min Max
MARC-PC
ACPI
Temperatures
THM_ 60 °C (139 °F) 52 °C (125 °F) 60 °C (139 °F)
Intel Mobile Core 2 Duo T8300
Temperatures
Core #0 58 °C (136 °F) 54 °C (129 °F) 58 °C (136 °F)
Core #1 63 °C (145 °F) 59 °C (138 °F) 63 °C (145 °F)
TOSHIBA MK3252GSX
Temperatures
Assembly 38 °C (100 °F) 38 °C (100 °F) 38 °C (100 °F)
Battery 1
Voltages
Current Voltage 12.22 V 12.22 V 12.22 V
Capacities
Designed Capacity 86580 mWh 86580 mWh 86580 mWh
Full Charge Capacity 26684 mWh 26684 mWh 26684 mWh
Current Capacity 86580 mWh 86580 mWh 86580 mWh
Level
Wear Level 70 % 70 % 70 %
Charge Level 324 % 324 % 324 %
MARC-PC (Dell Inc. Inspiron 1525)
ACPI
Temperatures
THM_ 60 °C (139 °F) 52 °C (125 °F) 60 °C (139 °F)
Intel Mobile Core 2 Duo T8300
Temperatures
Core #0 58 °C (136 °F) 54 °C (129 °F) 58 °C (136 °F)
Core #1 63 °C (145 °F) 59 °C (138 °F) 63 °C (145 °F)
TOSHIBA MK3252GSX
Temperatures
Assembly 38 °C (100 °F) 38 °C (100 °F) 38 °C (100 °F)
Battery 1
Voltages
Current Voltage 12.22 V 12.22 V 12.22 V
Capacities
Designed Capacity 86580 mWh 86580 mWh 86580 mWh
Full Charge Capacity 26684 mWh 26684 mWh 26684 mWh
Current Capacity 86580 mWh 86580 mWh 86580 mWh
Level
Wear Level 70 % 70 % 70 %
Charge Level 324 % 324 % 324 %

Edited by adamb103, 07 January 2011 - 09:07 PM.


#12 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:50 AM

Posted 07 January 2011 - 11:43 PM

It looks fine....

With the information you have provided I believe you will need help from the malware removal team. I would like you to start a new thread and post a DDS log HERE and include a link to this thread. Please make sure that you read the information about getting started before you start your thread.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient. Help is on the way!

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users