Heres One for ya

Discussion in 'Malware Help (A Specialist Will Reply)' started by FED UP, May 22, 2005.

  1. FED UP

    FED UP MajorGeek

    Greetings.
    I am a new user here, so if I commit any breaches of protocol, please let me know and I will adjust.
    I am having a problem. I have some sort of virus or worm or malware (or something!!!) that is causing my computer to lock up or restart. I cannot find any references to this problem in any of the threads I explored.
    I attempted to follow the steps recommended on the (TRY THIS BEFORE POSTING) bulletin. The bug will not allow some of the virus scans to complete before the computer locks up or restarts. I have had current Nortons installed on the computer, and ran the Nortons as well as spybot S&D, and AdAware every week. I did get my Nortons to complete a full scan and it found nothing. The online scans recommended will not even begin to run. When I DO get a virus scan to run, no viruses are found before the computer crashes.
    I ran my system restore disks and the bug is still active. I have no problem with wiping out my entire hard drive if necessary, as there is nothing on there that I need to keep at this point anyway.
    I will disclose more details if necessary, Im just a bit frustrated at this point.
     
  2. FED UP

    FED UP MajorGeek

    Yes I am replying to my own message. Yes I know I didnt disclose my system specs. Yes I am an idiot because I cant figure out how to edit/delete my post. Excuse me while I hit myself in the head with a hammer. D'OH!!!
    I am posting this from the computer at work, so Ill have to get my system specs when I get home and post them then. Excuse me while I bash my head against the monitor.
    D'OH!!!
    Please Kick Me.
     
  3. FED UP

    FED UP MajorGeek

    Okay I attempted to come online this morning and post my specs, but the f****** computer kept locking up on me, and I couldnt complete the task. I have an e-machines T1440, 1.40 GHzm, 40gb hard drive, 128sdram. I run windows XP.
    Can I just blast the entire hard drive, deleting EVERYTHING on it to get rid of my problem?
    I have access to this computer at work, so if there is something I can download and save to disk I can take it home and run it on the affected computer, as I have problems running it long enough to download stuff sometimes. Sometimes it will run for an hour without locking up/restarting, and sometimes I cant get 3 minutes out of it before it crashes.
    Maybe its time to unpack my old Commodore 64.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay since you are having such severe problems we will jump right to HijackThis to get started. You need to get the below onto your problem PC and get us the log. Make sure you follow the steps exactly and install HJT where requested.

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  5. FED UP

    FED UP MajorGeek

    After SEVEN attempts to upload the log file, I have had to drive BACK up to work after working a 13 hour shift just to upload a 5kb textfile. This is total B.S. I dont see how I can fix the affected computer when it wont run for more than 90 seconds without crashing.
    Heres the log.
    I am too pissed to write more.
    I hate computers.
     
  6. AbbySue

    AbbySue MajorGeeks Administrator

    If you still can't get the attachment to upload copy/paste the entire log into a post and one of us will convert it to an attachment for you.:)
     
  7. FED UP

    FED UP MajorGeek

    Please tell me I am not so retarded that i can't even post an attachment.
    But alas, this seems to be the case.
    Please kill me now.


    (thank you abby!)
     

    Attached Files:

    Last edited by a moderator: May 24, 2005
  8. AbbySue

    AbbySue MajorGeeks Administrator

    No problem FED up! Hang in there! Every once in a while people run into problems attaching logs...sometimes it's security settings....sometimes it's a nasty..and sometimes...it's just one of those things so don't worry about it...glad to help.:)
     
  9. jeff6303j

    jeff6303j Private E-2

    From what I see your log file looks legit.

    I may jsut be missing something, but nothing horrible stands out to me.

    gl hf
    Jeff
     
  10. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Logfile does look clean, though Internet Explorer is out of date. You may have a hardware issue causing lockups. To eliminate the possibility of spyware, please run our tutorial from safe mode, which should prevent lockups due to spyware, viruses, spyware, driver issues and so forth. I am unsure if you tried it from safe mode already?

    If you can come out of that clean, we have a huge problem and that is diagnosing what hardware is bad. It is a huge problem because you would have to remove hardware one at a time to figure out what is the problem, something many people cant do because they dont know how or have extra hardware...
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    As others have already mention you log is basically clean other than a very minor Alexa related issue in the below two line:
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

    But these are not the cause of your problems. As MA pointed your IE version is way out of date but even worse is that you OS (WinXP) is severely out of date. I'm not sure where you stand with installing all of your patches either. This could be a big problem.

    Please describe your problem in more detail. For example you are saying lock up or restart but are you get error messages about NT Authority shutdown ....60 seconds . Any messages like that? This would mean you need to get your patches (only a couple at a time) because you could have a Blaster worm.

    Without know the answer to my above question I would just suggest at this point that you give the below a quick run (just in case):

    Symantec W32.Blaster.Worm Removal Tool
    Symantec W32.Sasser Removal Tool

    Download these tools and unplug (physically) your connection to the internet before running them. This may prevent the shutdown if it is Blaster related.
     
  12. FED UP

    FED UP MajorGeek

    I am not getting ANY error messages
     
  13. FED UP

    FED UP MajorGeek

    No blaster worm found
    No sasser worm found
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    OKAY! It is possible that you have a hardware issue as MA stated but try the two programs I posted links to anyway. Then try downloading Belarc Advisor and run it to get a snapshot of what is installed on your PC. It will also indicate what patches are installed. Post that file back here. You may have to put it into a ZIP file because I believe it creates a .html file which is not uploadable.
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! You beat me on the scans.
     
  16. FED UP

    FED UP MajorGeek

    I get either a restart or a system lock up
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    After posting the Belarc log you may also want to look at your even log to see if any info can be found there.

    Click Start, Run, and enter eventvwr.msc and click OK! Look at the Application and System logs.
     
  18. FED UP

    FED UP MajorGeek

    Okay. I am now at a computer at work, so I can take more than 45 seconds to post a more detailed message. What happens is this: within a couple of minutes of power up, I get either a restart or the system freezes. When it freezes, the screen usually (but not always) goes black for a fraction of a second, and when it freezes, the active light on the hard drive stays on indefinitely. As I mentioned previously, I get NO error messages, and I am getting NO other symptoms of ANY other problems whatsoever. I DO believe the problem could be hardware related, though, and here's why: The very first time the computer locked up was at the PRECISE, EXACT instant the air conditioner in the house cycled off. The house was built, I believe, in 1962, and the electrical system is the original, and obviously outdated. The lights in the kitchen go dim when you turn on the toaster, if that gives you any idea of what I'm talking about. Could a power surge/spike cause by the A/C have damaged a component within the CPU that is causing this problem? If so, wouldnt it be more economical to simply replace the CPU (which is outdated now anyway) rather than attempting to replace what is screwed up in the CPU? I also wonder if maybe the modem was damaged by a power spike, could the modem cause the computer to lock up? I guess I need to disconnect the modem and see if the computer locks up with it not connected.
    Yes I know IE is running with outdated updates. I never updated IE because I was using only FireFox. But now, after reading these threads on MG, I realize that it is important to keep IE updated anyway.
    I NEVER ran updates for the OS, because I am a dillwad and didn't realize the importance. Truth be told, the affected computer is actually my mothers', who uses it only for e-mail. I only used it occasionally for surfing. So i can tell you now that there has, in all likelyhood, NEVER been an update run for any of the Windows Products on the computer.
    I guess that I will ATTEMPT to run through the tutorial in safe mode, as MA suggests. I will buy a new bottle of aspirin to get me through this process. I will write down all activities and results, and will post them ASAP.
    Perhaps I should start shopping for one of those gigantic hammers I have seen in the cartoons on TV. Just a thought.....
    I would also like to tell you folks that MG is a freakin' GODSEND. You people are doing a WONDERFUL job counterbalancing all the maliciousness on the internet. If there is a heaven, y'all got a first class, non-stop ticket waiting.
    I have learned some good things here, and you can rest assured that I will turn to MG for any and all future support issues.

    >>>>>>>>>>> THANKS <<<<<<<<<<<
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If your problem is hardware related (especially if the harddisk is going bad), booting in safe mode will more than likely end up with the same results. If you can run in safe mode okay, it may be a bad driver or other software issue.

    I'm not sure what your definition of CPU is but CPU means central processing unit which really just means the microprocessor. If it were damaged, your PC would not run at all. So did you really mean to say that your whole computer is outdated?

    Can your modem be a problem? Possibly! Especially if it is an internal modem. If it is external, I doubt it is related to your problems.
     
  20. FED UP

    FED UP MajorGeek

    What I meant by CPU is the tower unit.
     
  21. FED UP

    FED UP MajorGeek

    I was just in safe mode for more than 30 minutes with no crash
    \I ran AVAST! cleaner abnd STINGER in safe mode and nothing was found
     
  22. FED UP

    FED UP MajorGeek

    Problem is I cant establish an internet connection in safe mode (with networking)
    how can I do that?
     
  23. FED UP

    FED UP MajorGeek

    Oh and I have an external modem
    I need to establish an internet connection in safe mode so I can complete the online scans in the tutorial
     
  24. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Technically thats the whole computer.
     
  25. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That cannot be done with dial up.

    If your problem does not occur in safe mode while disconnected from the internet, answer this. If you boot your PC in normal mode and do not connect to the internet and do not open any browsers (just do other stuff), how long does it run for now.

    Also download this: Microworld Antivirus Toolkit Utility
    Then boot into safe mode and run it. It will not fix anything, but it will report what it finds. Save that report and post it back here.
     
  26. FED UP

    FED UP MajorGeek

    Okay. Once again I had to come up to work to post a message.
    The computer locks up just the same if I dont connect to internet or open any browsers. Also, it locks up in safe mode as well. I have no idea how I was able to run in safe mode so long earlier today, but I can assure you now that it DOES lock up in safe mode.
    I will attempt to attach the BELARC file to this message, I was able to run that.
    I cannot figure out how to run the MICROWORLD ANTIVIRUS TOOLKIT in safe mode, as I cannot find the file. But I was able to run a partial scan in normal mode and it found:
    ALEXA found - no action taken
    "HKLM\software\microsoft\windows\currentversion\sharedDlls"refers to invalid object C:\windows\system32\msxml3a.dll"
    "HKCR\CLSID\{88E729d6-BDC1-11d1-bd2a-00c04fb9603f}refers to invalid object"fde.dll"

    Then it locks up. Both times I tried it.

    Why cant I find the toolkit in safe mode?
    Yes, I do understand that the tower unit is basically the whole computer. That particular tower i can get new for probably less than $300. Thats why I was wondering, if the affected one IS having a hardware problem, if I would be better off just buying a new tower unit (since the affected one is old and slow anyway)

    I cannot connect to DSL from safe mode? I guess that is the same as dial-up as far as connecting from safe mode (cant be done) ?
    Hm.... Cant think of anything else while Im here on a good computer so,
    WHAT NEXT?
    Have I missed something I should have done?

    After attempting to zip the HTML belarc profile, I am told that an output file cannot be created, so apparently I cannot upload it. Isn't that nice?

    I hate computers.
     
  27. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You probably cannot find the toolkit because of the location that you downloaded it to. You must make sure it is in a common location that is available when in safe mode. I do not think it is going to help. Neither will Belarc (we already know you are way out of date). Sounds like you need to possible do some hardware debugging. Either there is a physical hardware or a driver conflict problem. It could also be a memory issue.

    You would be better off addressing this in the Hardware Forum since we devote all of our time here to fighting malware.
     
  28. FED UP

    FED UP MajorGeek

    heres this.........
    Great. It wont let me upload the completed scan log from MICROWORLD tooldkit.
    It says the file is too large.
    Isnt this fun?
     
  29. FED UP

    FED UP MajorGeek

    Okay, ill move to the hardware forum.
    THanks for all your help!
     
  30. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You could compress the file into a ZIP file and then upload it. It may be small enough that way.
     
  31. FED UP

    FED UP MajorGeek

    Dearest Major Geeks:

    I certainly appreciate all the help I have received concerning this issue. Although the affected tower unit shall soon meet its destiny as a doorstop, I am happy to report that this problem has served its purpose as a solid excuse to buy a new computer. This morning I purchased a brand new Gateway 827GM. I will most certainly return to MG for assistance during my adventures with the new computer. I have learned many valuable lessons during this experience, largely from visiting MG. You guys are awesome. Thanks.
    Oh, and I swear Im going to stay on top of my updates this time! :)
     
  32. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Sounds great!

    But make sure you check out the below link ASAP. While your new PC should probably come with WinXP SP2, the firewall in WinXP SP2 is not really sufficient. One of the ones mentioned in the below link should be installed and then the one in SP2 should be disabled (it is enabled by default).

    How to Protect yourself from malware!
     
  33. FED UP

    FED UP MajorGeek

    Heck yeah, Im gonna take yer advice, chaslang.
    One more thing.
    Could you recommend a site where I can learn about the basics of (home) computers and operating systems, hardware and the like? I am hungry for this knowledge.
    HOOK A NIZZLE UP!!!

    Thanks!
     
  34. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    We have very good Software, Hardware, Networking, & Programming forums here on MG's. You should check them out. I'm not sure what your current knowledge level is or exactly what you want to learn about, but you can ask questions in those forums and get plenty of help. They may also be able to refer you to particular sites.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds