5 year old HP Pavillion random shut downs...

Hi,
I have a HP Pavillion with an AMD Athlon 64 3200+ running @ 2.21 ghz with 2 gb of ram. It's also running Windows xp with sp3, I use avast for virus, Ad aware, and Advanced system care. I ran a virus scan last night and came up with a tool bar and something else that didn't look particularly malicious but I moved both to virus chest.

My problem is random shut downs. I confess I leave my computer on for days @ a time and it has always shut down after it's been on for over a day. The other variables which may have some bearing on this are that I'm using pro miles which is a trucking program that is rather expensive and hasn't been updated recently but is sometimes unstable and memory and cpu hungry @ times. I also installed sp3 and put new ram in before the random shut downs started. (upgraded from 512 mb to 2 gb of ram, good brand of ram though, crucial or something.....). I had shut off my error reporting for some reason but enabled it again.

When the shut downs occur I have been using pro miles, as I said it's rather unstable and the program itself has quit at times when I am entering data, this isn't a regular thing, the program shuts down when I am entering large amounts of data and it freezes and then shuts down. It's happened maybe 5 times this year.

The computer shut downs are usually when I have like 5 or 6 programs open but I usually have 2 or more programs open. When the computer shuts down it reboots immediately, really doesn't make any weird noise, I haven't noticed fan being noisy, a screen comes up with a missing dll, tivioli something or another but it's done that forever on all reboots, I just haven't investigated what it means.....no blue screen, just working away and poof the screen is black.....then it reboots....:cry

I also am backing up to carbonite, I'm not a complete idiot......LOL:cool

I read somewhere here that sp3 may cause problems with a driver and AMD processors on HP machines? Could this be my problem?:confused

I've ran Packard Bell or HP most of the time since I bought my first PC. Other than Windows giving me fits on occasion they have been GREAT?
THANKS for any input.
Teresa

 

Hi Teresa, this reads like you might have a problem with the new RAM. Probably best to rule that out by running Memtest86+ overnight. If the memory tests all pass, we'll move on to software.

Download ImgBurn to burn the Memtest86+ CD to boot from if you need to.

More info on memory diagnostics here.

 

Thanks!! I already had ImgBurn, I used to dabble in linux. I'll see if I can accomplish this, it's been forever since I burned a cd and this computer has always been the type that you have to swing the dead cat to get it to do anything cd related...
Thanks,
Teresa

 

I tried running memtest86+ but evidently I goofed in making the cd bootable or something. And of course I didn't try to run it until I was tired.

I did write down the missing dll, Plodr, it's tivivapi.dll although the a could be an o, I wrote that down when I was tired also. It said it's a windws 32 dll?

I haven't done a search on it yet. I am doing taxes for people and my German Shepherd disappeared the other night or yesterday morning. THANK you all though!! I'll be back asap.
Teresa

 

OK, try memtest again, as memory is the most likely culprit at this point.

 

Teresa, I can only find tivivapi.dll associated with malware. To be sure your PC is clean, please do the READ and RUN me, read this carefully then download and run the programs as required, if you have any errors, please note them carefully. Once you have all the logs you can create a new post in the Malware forum to get checked out.

 

I am making a list of what I'm doing, I'm cleaning all sorts of stuff, got rid of old java. Not sure how I will get the memory test cd to run. This computer has ALWAYS has problems with it's cd drive. I don't use it for months @ a time so it normally doesn't bother me, I've had to like reinstall the drivers more than once to get it to work. Now it will run and burn but if I try to explore the drive it says it's not there....that is of no importance right now as long as the computer doesn't shut down.

I used ms config to take the tivivapi.dll out of the startup. I think avast caught the malware but for some reason the reference to the dll got in the startup files....that probably isn't quite correct but it doesn't hurt my brain.

Anyway I'm slowly making progress with the READandRUNme link. THANKS!!

 

Don't worry about the memory test, malware could be your only problem, time will tell.

 

I guess it's time to move to the malware forum....I was cleaning, updated java, took old programs off, ran cc cleaner, and advanced system care. THEN today I had pro miles running (trucking software, I've had it for years but it's rather memory intensive) and I was away from the computer and it had shut down and came back on.
MS Security Essentials virus had invaded. I couldn't do anything in normal mode and it actually went to a blue screen once, I think I made it mad going to firefox after the fake ms security program told me firefox was trying to infiltrate, task manager and sea monkey wouldn't even THINK about loading, fake ms security said my avast.exe was infected. So I went to safe mode with networking, downloaded malware bytes and I can't see that it found the fake ms security essentials but here is it's log....if this didn't do the trick you will see me in Malware forum....I was like most of the way through what you all told me to do!!

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6306

Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

4/7/2011 7:02:56 PM
mbam-log-2011-04-07 (19-02-56).txt

Scan type: Quick scan
Objects scanned: 163520
Time elapsed: 3 minute(s), 54 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 16
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 13
Files Infected: 6

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{014DA6C1-189F-421a-88CD-07CFE51CFF10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{014DA6C0-189F-421a-88CD-07CFE51CFF10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{014DA6C4-189F-421A-88CD-07CFE51CFF10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{014DA6CB-189F-421a-88CD-07CFE51CFF10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MySearchToolBar.SettingsPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MySearchToolBar.SettingsPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\My Search Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
c:\program files\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\screensaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\screensaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MySearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MySearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MySearch\bar\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MySearch\SrchAstt (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MySearch\SrchAstt\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
c:\documents and settings\HP_Owner\Desktop\smileycentralpfsetup2.2.60.11-2.znfox000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\kogekebe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\screensaver\Images\3B416163.urr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MySearch\bar\1.bin\mysearchpluginproxy.class (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\History\search2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.​