Problems with computer

[USSR]

Hello, I have a big depression!

 

After using my computer for a while it suddenly restarts (usually after 1-2 hours, but sometimes up to 8-10)

As far as I know, I?m not overclocking anything!

Here are my pc-specifications:

 

Soltek Mainboard SL-848P/848P-L

Intel 484P chipset with latest driver

Intel Pentium 4 3,2 GHz 800MHz FSB

2x 512 MB DDR 400MHz

GeForce 5600 Ultra with latest driver (Soon to be GeForce 6800 Ultra )

Realtek AC?97 Audio with latest driver

250 W PSU

Windows XP Home SP2 with latest updates

 

Please help me!

[Andavari]

Does it happen when you are online, or offline?

Are you running a firewall?

 

If it happens when you're online, and you don't have a third-party personal firewall installed at the very least make sure you enable the Windows Firewall. The reason I say this is because years ago my system would occassionally freeze, shutdown, and reboot due to not running a firewall. I believe that behavior is an outside attack called BootPC which comes in on TCP ports 67, and 68, albeit I don't know if that's what's causing your problem.

[USSR]

Does it happen when you are online, or offline?

Are you running a firewall?

 

If it happens when you're online, and you don't have a third-party personal firewall installed at the very least make sure you enable the Windows Firewall. The reason I say this is because years ago my system would occassionally freeze, shutdown, and reboot due to not running a firewall. I believe that behavior is an outside attack called BootPC which comes in on TCP ports 67, and 68, albeit I don't know if that's what's causing your problem.

 

<{POST_SNAPBACK}>

 

 

 

Random, completely random.

Off/Online doesn't matter.

My pc isn't slow, but it have had spyware.

I'm running:

Norman Virus Control with latest updates

Microsoft AntiSpyware

Windows Firewall with only one exeption (for my antivirus)

Tryed Lavasoft = only one tracking cookie

[rridgely]

Do not use the windows firewall it is very bad at stopping anything. Get this its called zone alarm and its free. Go through its configurations and you wont even know its running (turn off notifications).

http://www.download.com/ZoneAlarm/3000-104...tml?tag=lst-0-2

 

Also run these programs

CWShredder

Removes cool web search.

http://www.download.com/CWShredder/3000-80...9.html?tag=free

 

Spyware Blaster

Stop spyware and adware from being downloaded in the first place. Just be shure to keep it up dated and to always click block all know issues after updating.

http://www.javacoolsoftware.com/spywareblaster.html

 

Spybot

Removes spyware and immunizes your pc from know threats.

http://www.download.com/Spybot-Search-Dest...tml?tag=lst-0-1

 

HijackThis

creates logfiles of key areas of your hard drive and registry. Post log files on this forum to have them evaluated.

http://www.download.com/HijackThis/3000-80...tml?tag=lst-0-8

[USSR]

Do not use the windows firewall it is very bad at stopping anything. Get this its called zone alarm and its free. Go through its configurations and you wont even know its running (turn off notifications).

http://www.download.com/ZoneAlarm/3000-104...tml?tag=lst-0-2

 

Also run these programs

CWShredder

Removes cool web search.

http://www.download.com/CWShredder/3000-80...9.html?tag=free

 

Spyware Blaster

Stop spyware and adware from being downloaded in the first place. Just be shure to keep it up dated and to always click block all know issues after updating.

http://www.javacoolsoftware.com/spywareblaster.html

 

Spybot

Removes spyware and immunizes your pc from know threats.

http://www.download.com/Spybot-Search-Dest...tml?tag=lst-0-1

 

HijackThis

creates logfiles of key areas of your hard drive and registry. Post log files on this forum to have them evaluated.

http://www.download.com/HijackThis/3000-80...tml?tag=lst-0-8

 

<{POST_SNAPBACK}>

 

 

 

Well...

 

1)CWShredder found one infection

 

2)Up and running

 

3)Logfile of HijackThis v1.99.1

Scan saved at 22:24:43, on 09-06-2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Programmer\Microsoft AntiSpyware\gcasServ.exe

C:\Programmer\Norman Virus Control\bin\ZLH.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Programmer\MSN Toolbar Suite\DS\02.02.0000.1007\en-us\bin\WindowsSearch.exe

C:\Programmer\F?lles filer\Microsoft Shared\Works Shared\WkCalRem.exe

C:\Programmer\Microsoft AntiSpyware\gcasDtServ.exe

C:\Programmer\MSN Toolbar Suite\DS\02.02.0000.1007\en-us\bin\WindowsSearchIndexer.exe

C:\WINDOWS\system32\cisvc.exe

C:\Programmer\Norman Virus Control\Bin\Zanda.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wdfmgr.exe

C:\Programmer\Norman Virus Control\Nvc\BIN\NIP.EXE

C:\Programmer\Norman Virus Control\Nvc\BIN\NVCSCHED.EXE

C:\Programmer\Norman Virus Control\bin\NJEEVES.EXE

C:\Programmer\Norman Virus Control\Nvc\BIN\nipsvc.exe

C:\Programmer\Norman Virus Control\Nvc\bin\nvcoas.exe

C:\WINDOWS\System32\alg.exe

C:\Programmer\Norman Virus Control\Nvc\bin\cclaw.exe

C:\WINDOWS\system32\cidaemon.exe

C:\Programmer\Internet Explorer\iexplore.exe

C:\Programmer\MSN Toolbar Suite\SL\02.01.0000.2214\en-us\msn_sl.exe

C:\Documents and Settings\Alex Mihalchuk\Skrivebord\hijackthis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.newz.dk/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://newz.dk/

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmer\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll

O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmer\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll

O4 - HKLM\..\Run: [gcasServ] "C:\Programmer\Microsoft AntiSpyware\gcasServ.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Norman ZANDA] C:\Programmer\Norman Virus Control\bin\ZLH.EXE /LOAD /SPLASH

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - Startup: WKCALREM.LNK = ?

O4 - Global Startup: Windows Desktop Search.lnk = C:\Programmer\MSN Toolbar Suite\DS\02.02.0000.1007\en-us\bin\WindowsSearch.exe

O8 - Extra context menu item: &MSN Search - res://C:\Programmer\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll/search.htm

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmer\F?lles filer\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: @C:\Programmer\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: @C:\Programmer\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe

O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/insta...staller_gmn.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1118124426937

O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - http://transfers.one.microsoft.com/FTM/Tra...ransferCtrl.cab

O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx

O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?326

O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab

O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by20fd.bay20.hotmail.msn.com/activex/HMAtchmt.ocx

O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Programmer\Norman Virus Control\Nvc\BIN\nipsvc.exe

O23 - Service: Norman NJeeves - Unknown owner - C:\Programmer\Norman Virus Control\bin\NJEEVES.EXE

O23 - Service: Norman ZANDA - Unknown owner - C:\Programmer\Norman Virus Control\Bin\Zanda.exe

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Programmer\Norman Virus Control\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Programmer\Norman Virus Control\Nvc\BIN\NVCSCHED.EXE

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

 

4) My Power Supply is only at 250 W, is that enough???

I Have:

2 HD

2 CD/DVD

My GPU uses extra power

Just unsure?

What about, when I change to GF 6800 Ultra, will I need to increase?

[DjLizard]

250 watts is pretty weak... I'm not certain [by your description] if it's too weak, but when you change to a 6800 Ultra, you will definitely need a 400 watt power supply. Get an Antec (trust me). - whichever one's more than 400 watts, and affordable to you. www.newegg.com is the recommended source.

 

 

Do this first for me:

 

Right click 'My Computer', go to Properties, Advanced, Startup and Recovery>Settings, System Failure>Automatically Restart <- UNCHECK THAT.

 

Then, when your computer tries to blow up and reboot, it may actually stop at a blue screen of death that I can help you debug. I betcha it's memory

 

Get yourself a blank floppy (if you have a floppy drive) and make a disk using this: http://www.memtest.org/download/1.51/memte...1.51.floppy.zip

 

Boot up to it, and let it run until Pass: 1. (see attached image below). If anything's wrong with your RAM, it will be fairly obvious (bright red lines saying ERROR or the screen will get corrupted with random wacky colorful characters). If your computer turns completely off electrically, then you most likely need a new power supply.

[Andavari]

Do not use the windows firewall it is very bad at stopping anything.

 

<{POST_SNAPBACK}>

 

 

Can you give a better explaination for that statement?

It does a good job at blocking incoming traffic. Although it doesn't do anything to block outgoing traffic. After putting up with bugs in Sygate Personal Firewall for years, and recently ZoneAlarm (free) I've found that Windows Firewall is the only firewall I've used in years that hasn't given me any noticable problems. It also passes the ShieldsUp test as TruStealth at GRC.com (Please no grcsucks.com links).

[rridgely]

So you dont think it's a problem that the windows firewall dosent scan out going traffic? So what if you download a program that connects to the internet without your knowledge and downloads a virus? With zone alarm all I have to is click deny access and problem solved, not so with the windows firewall. Also right when sp2 first came out wasnt their a problem with certain viruses and worms that could actually shut it down? I have no clue if this was fixed.

 

What problems did you have with zone alarm? I have been using it for about two years and it has never crashed or anything. Once I allowed firefox and thunderbird and my games access to the internet and turned off the notifications I dont even know its running. I just click allow when a program wants access and thats it.

 

Look at this (look under other firewalls)as well. Zone Alarm recommended on a microsoft site? Sounds like the windows firewall is a stinker to me.

[USSR]

#6 DjLizard

 

I have good news and bad news!

 

First bad news:

 

You were right, it's memory. I got 244 errors ... sad .

 

The good news:

 

I tested my memory modules separately, and found out that only one of them was bad. That a good thing . Going to buy a new soon.

(Thinking about a 1GB module = 1,5 GB )

 

I really hoped, that it would restart, since I've bought a new Power Supply.

But now it is at least GF6800 ready

[Andavari]

Firewall discussion is continued here:

http://forum.CCleaner.com/index.php?showtopic=1371

 

This is for respect to USSR so his problem can be solved without any offtopic replies.

[Andavari]

I tested my memory modules separately, and found out that only one of them was bad.

 

<{POST_SNAPBACK}>

 

 

Have you had any file corruption due to the faulty memory?

[DjLizard]

Despite the grcsucks.com (thanks for pointing that out Andavari, I had no idea such a following existed) - I still continue to use and highly praise Spinrite -- this is probably because it is a real work of art and not self-serving security expert crap like the subject content of grcsucks.com explains... I think that grc's Spinrite is the best of the best (cause I've used it so much and I can prove that it rules

 

USSR: I knew it'd be only one module

Yeah, you may want to CHKDSK the crap out of your drive:

Start, Run...,

fsutil dirty set C:

Then restart your computer.

(This schedules a CHKDSK for the next bootup)

[USSR]

Have you had any file corruption due to the faulty memory?

<{POST_SNAPBACK}>

 

Yes. I used to get an error in the tray, where OS said, that there was a corrupted file. I usually run CHKDSK afterwards.

 

USSR: I knew it'd be only one module

Yeah, you may want to CHKDSK the crap out of your drive:

Start, Run...,

fsutil dirty set C:

Then restart your computer.

(This schedules a CHKDSK for the next bootup)

<{POST_SNAPBACK}>

 

Done.

 

Thank to all of you for your help

 

But before the end of the topic, I have a last question!

What should I look for, when I buy new RAM.

All I know is that it must be 1GB PC3200.

[DjLizard]

Buy it at Crucial.com!

 

All you need to know is what you already said

[USSR]

Thanks again everyone!