Login  Malware Removal & HijackThis Logs |
| |
| |
| | Thread Tools |
25-Apr-2008, 10:00 PM
#47 | |||||
| Hi, jeff1111  It is a mystery. Right click on My Computer. Select Properties. Select the Advanced tab. Under Startup and recovery, click on Settings. Under System failure, remove the checkmark from "Automatically restart". Now, if for some reason the computer attempts to restart, it should not and as error message on a BSOD should be returned. If it does, post the contents of the error message. On the process above, after selecting Properties, allow the information to load in that window. Compare the information therein concerning your physical memory. Please go to Virus Total and scan the following file: C:\Windows\Explorer.exe Post the results in your next reply. I will ask you at this time to rename Combofix during its download. You cannot rename Combofix after it is downloaded. It may create a lot of problems. Also, do not rename Combofix unless instructed by an authorized member, and only using the name provided. Please remove the version of Combofix present in your computer, if any, then follow these steps: Please download ComboFix from Here or Here to your Desktop. **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**
__________________ Sometimes I think I understand everything, then I regain consciousness. If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here Unanswered threads for 5 days will no longer be part of my subscriptions. For further help, please send me a Private Message. This applies only to the original thread starter. Everyone else please begin a New Thread. |
27-Apr-2008, 04:53 AM
#49 | |||||
| Hi, jeff1111 What puzzles me is that combofix runs when renamed, but not when ran as Combofix. Please go to Virus Total and scan the following files: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\REGSHAVE\REGSHAVE.exe C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe Post the reports only if something wrong is found.
__________________ Sometimes I think I understand everything, then I regain consciousness. If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here Unanswered threads for 5 days will no longer be part of my subscriptions. For further help, please send me a Private Message. This applies only to the original thread starter. Everyone else please begin a New Thread. |
27-Apr-2008, 08:48 PM
#51 | |||||
|
__________________ Sometimes I think I understand everything, then I regain consciousness. If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here Unanswered threads for 5 days will no longer be part of my subscriptions. For further help, please send me a Private Message. This applies only to the original thread starter. Everyone else please begin a New Thread. |
28-Apr-2008, 10:35 PM
#57 | |||||
| Hi, jeff1111 This is the inormations I have been able to extract from the minidumps you have submitted. The BSOD error you are experiencing is define as follows: IRQL_NOT_LESS_OR_EQUAL (a) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. The files (modules) in question are as follows: Quote:
I would like to start by identifying however, that update.exe file mentioned in the Minnidumps and find out what it is for.
Quote:
__________________ Sometimes I think I understand everything, then I regain consciousness. If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here Unanswered threads for 5 days will no longer be part of my subscriptions. For further help, please send me a Private Message. This applies only to the original thread starter. Everyone else please begin a New Thread. |
29-Apr-2008, 04:40 PM
#59 | |||||
| Hi, jeff1111 It will be quite difficult to identify the update.exe file from that list. Do you have any use for the C:\Speedo Autorun Maker? How much memory (RAM) is installed in your computer? How many modules (sticks) are present? Download the AVG Free installation file to your desktop, but do not run it yet. Please then reboot your computer in Safe Mode by doing the following :
Please go to Start > Control Panel > Add/Remove Programs and remove the following (if present): Programs Related to Avast Antivirus If for any reason you cannot remove Avast in Safe Mode, attempt its removal in Normal Mode. Once Avast is removed, (in Normal Mode) double-click on the AVG installation file on your desktop and follow the prompts for its installation. Update its definition and perform a full scan. Please also attempt to re-enact the BSOD error message (perhaps running DSS), and let me know the outcome. I would also like to see another (Mypoppy) Combofix log.
__________________ Sometimes I think I understand everything, then I regain consciousness. If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here Unanswered threads for 5 days will no longer be part of my subscriptions. For further help, please send me a Private Message. This applies only to the original thread starter. Everyone else please begin a New Thread. |
 |
