Tech Support Guy banner
Status
Not open for further replies.

Win XP Reboot Problems! Virus or Trojans? Help! Details INSIDE! WILL TIP!!

2K views 42 replies 9 participants last post by  Ariesjill 
#1 ·
Hey everyone,

For the past two weeks I have been having some major problems with my PC restarting unexpectedly. I recently just moved my PC from my brothers room (where it was working fine), into my room (when the problems started to occur). Sometimes it restarts every 5 hours, or even as soon as I turn it on :( I need help!

This has been extremely frustrating, I have sat here for hours trying to figure this out but It's time I need some professional help and I thought you guys would be able to help me.

First off, this is what I am running: (Computer is custom built)

Motherboard: Intel DP965LT

Chipset: Intel P965

Processor: Intel Petnium D 820 @ 2800 Mhz

Physical Memory: 1024 MB (2x 512 DDR - 2-SDRAM)

Video Card: Nvidia Corp GeForce 7300 GS

Hard Disk: ST3808110AS (80 GB)

DvD Rom Drive: HL - DT - ST DVDRAM GSA - 4167B

Network Card: Intel Corp. 82566DC G5 Net.

Microsoft Windows XP Home Ed. Service Pack 2

Now, here is a report of my system using ''Hijackthis''

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:59:24 PM, on 11/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\AIM6\aim6.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Intel\IDU\awServ.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1194918121390
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1195436061812
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - C:\Program Files\Intel\IDU\awServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 4518 bytes

I have tried reformatting it, and everything but the problem still is here. I am no longer sure what to do, I have checked for overheating but that doesn't seem to be the problem, I was thinking it may have to due with the software but I am not sure. As I said, I am wiling to tip via Paypal to anyone who can help me and assist me with this problem.

Please, any help and advise would be appreciated.

Thanks.

Sincerely,

Cory
 
See less See more
#2 ·
Go to Control Panel>System>Advanced tab

Under startup and recovery click "settings..."

Uncheck "Automatically restart"

This will help, since it will display a blue screen before crashing - please write it down here. Since this problem has appeared since you moved the PC, I suspect it's a hardware issue.

Just in case, check that the power cable is securely plugged in on both ends and perhaps try plugging it in at another socket.:)

EDIT: just noticed that you formatted - then it must be a hardware issue
 
#4 ·
When U say youve tried reformating, do U mean an actual clean install?????

Next, I C from yr HJT log that while you do have Grisoft/AVG, I see no actively running antispy programs.

Do you have a firewall installed?

Would not hurt to visit Trend Micro Housecall, follow directions and choose scan for everything and sit back and wait.

http://us.trendmicro.com/us/products/personal/free-tools-and-services/index.html

Report the results after letting Housecall remove any infections.

Would also suggest you download this fab freeware from my friends in China, Advanced Windows Care.

Along with many other totally configurable features and warspeed engine, it also has actively running anti spy....but we should always have more than one of those.
http://www.iobit.com/advancedwindowscareper.html?Str=download
 
#5 ·
There is some pertinent info from a previous thread by this poster here:

http://forums.techguy.org/windows-nt-2000-xp/651087-extreme-problems-please-help-overheating.html

cory_x123 said:
Hey All,

Well as the title says, I am having some crucial and serious problems with my current Home PC.

First off, my PC is custom built and probably is about 3-4 years old. It's really not that old, but I know I should keep upgrading the software/hardware or buy an new PC every couple of years but I do not have the funds to do so atm.

The first problem is that it restarts by itself. I'm not sure whether this is due to overheaing, bad power supply or what. It is getting extremely frustrating and bad.

Second problem is when it does restart, it does properly load. I get an error message and asking if I want to continue with the last safe settings of my PC, or start windows normally.
I have tried both options, and whenever I hit them it will get to the XP loading screen and just restat again and keep repeating. I have no clue what this means but if anyone does can the PLEASE help me?

I am in the process of reformatting it, and it was completed recently. I was reinstalling my drivers, such as my chipset etc when it asked to restart to update the hardware like normal. It's not letting me back into windows, it keeps doing the same process that I stated above. (Not loading all the way and restarting at the Windows XP Screen).

So please, if anyone has any solutions or can help me please contact me VIA AIM or just post here! Tips will be given if somebody can guide me through this.

AIM - DestinyxMD
 
#6 ·
zabusant said:
Go to Control Panel>System>Advanced tab

Under startup and recovery click "settings..."

Uncheck "Automatically restart"

This will help, since it will display a blue screen before crashing - please write it down here. Since this problem has appeared since you moved the PC, I suspect it's a hardware issue.

Just in case, check that the power cable is securely plugged in on both ends and perhaps try plugging it in at another socket.:)

EDIT: just noticed that you formatted - then it must be a hardware issue
Yes, I have already done so, here is the error message I get.

---------
A problem has been detected and windows has been shut down to prevent damage to your computer.

''Check to be sure you have adequate disk space. If a driver is identified in the stop message, disable the driver or check with the manufacturers for driver updates. Try changing the video adapters.

Check with your hardware vendor for any BIOS updates. Disable BIOS memory options such as caching or shadowing. If you need to use safe mode to remove or disable component's, restart your PC.''

That is the error I get.

And yes, I FULLY re-installed windows (well atleast I think I did). Please guys, I need some help!

P.S. I just plugged it into my main wall outlet, just in case I was getting an insufficient amount of electricity from my extension cord.
 
#8 ·
Cory,

I see via the link above re another of yr threads....that I, for one am in waaaaaay over my head in this.

But, I am sure the true pundits will help you diagnose this.

I know it's disgusting and anxiety-making--it is for most humans enduring such....but just take deep breath, hang in, right foot, left foot ...and this too shall be troubleshot and you will own powerful new info and skills. Honest.
 
#10 ·
Can you put these in chronological order for us, please?

A. Machine ran fine
B. Moved the machine
C. Shutdowns started
D. Blue Screens Appeared
E. Reinstalled Windows
F. Checked Device Manager for Yellow Splats

The driver in the blue screen message (if there is one) might point us in the right direction as well...Navigate to C:\Windows\minidump and see if there are any .dmp files there--if there are, please zip up the last few (they're named by the date they were created) and attach them to your next reply to this thread.
 
#11 ·
1. Machine was fine
2. Moved Computer
3. Started restarting the Next Day
4. Reformatted Windows
5. Still restarted
6. Enabled BSOD
7. Got this error message:

0x0000007E (0x0000005,0X5057202B,0XF7A55CA0,0,xF95599C)

Not sure if there was a space after the comma or not.

And yes, there were tons of .dmp files in my minidump.. it says it exceeds the 500kb maximum for .zip files :(

HELP?!
 
#18 ·

Attachments

#21 ·
Well...neither, it's pretty normal.

What I actually meant for you to do is this:

Start>Run... type: "cmd" without the brackets and click ok

Type "chkdsk c: /f" again without the brackets and press enter (I'm assuming here, that we're checking c: drive, if not, replace it with the correct one)

Click "y" to shedule it at next restart - and restart the PC

This could take some time tho:)
 
#25 ·
Cory

Do you feel comfortable opening the computer up? If so, take out and reseat the video card. Then reseat all other cards and make sure that all cables and plugs are firmly in place. If the 2 Ram sticks are the same speed swap them. Make sure that the processor heat sink is firmly in place and not full of dust and the fan is working. If you are still having problems run memtest. http://www.memtest.org/

Don't forget to take proper anti-static precautions.

Based on your description this is likely a hardware problem. Intermittent problems like this are usually due to poor connections or a failing power supply.

Good luck
dwight
 
#26 ·
Cory:
I was having similar problems with random reboots and tried everything I could think of. I ran memtest v. 1.70 for an hour and it came back clean. However, it was recommended that I run it much longer, so I ran it for six hours and it came back with two errors. I surmised that every time the RAM would throw an error, the computer would reboot. I swapped out the stick of RAM and my computer hasn't rebooted on its own in two days.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top