| View previous topic :: View next topic |
| Author |
Message |
gracemovitch
Cadet
Joined: May 16, 2004
Posts: 7
Location: USA
|
 Posted: Mon May 17, 2004 4:15 pm Post subject: Help! |
|
|
Hello everybody,
Over the past months, my computer had been shutting down and restarting itself over uneven intervals... it always starts with the screen kind of blanking out, then a blue screen flashes with some words on it for a second, and then the computer restarts again and everything seems normal. I kind of ignored the problem until recently, where I managed to catch some words on the blue screen that says , "IRAQ_MORE_OR_LESS_EQUAL". I'm not sure what to do about it... Can you guys please tell me what this is and how I can fix the problem?
Thanks.
 |
|
| Back to top |
|
 |
Acheton
Forums Admin
Premium Member
Joined: Sep 04, 2003
Posts: 2772
Location: Uk
|
| Posted: Mon May 17, 2004 4:48 pm Post subject: |
|
|
I've moved your post here to a more appropriate forum. Someone will be by shortly to help you out.
Have you tried vacuuming your computer? Carefully obviously. This is a serious suggestion. I had this problem a 9 months ago and it was solved by some judicious vacuuming.
Ach |
|
| Back to top |
|
|
gracemovitch
Cadet
Joined: May 16, 2004
Posts: 7
Location: USA
|
| Posted: Tue May 18, 2004 5:21 pm Post subject: |
|
|
Thank you for you advice. However, in the beginning when my computer started to restart itself, my brother and his friend told me that my computer might have been experiencing the problem because I had a disfuncitonal computer fan that lead the computer to overheat. They replaced the fan, yet the problem didn't go away, and it seems like the restarting problem is getting worse these days... (the computer shut itself down on me just two minutes ago when I when i tried to post this message). Awhile ago, I asked a friend of mine what had been happening on my computer, and he told me that I have something like a "looping program" that restarts my computer whenever I open a website that has somekind of news source in it and it gets sent to my computer  ...something along the lines of that, i'm not quite sure. He told me that I woudl have to look for the program by opening my task manager and find out which of teh programs cause this problem, but I'm not sure how to figure that out. I appreciate your advice, but doesn't the message "Iraq more or less equal" indicate that there is a problem that is something that is alittle beyond a mere hardware problem?
Gracemovitch |
|
| Back to top |
|
|
Geekgirl
Trooper
Joined: May 16, 2004
Posts: 17
Location: USA
|
| Posted: Wed May 19, 2004 10:40 pm Post subject: |
|
|
Sporadic behavior or self-booting is typical behavior from a computer with a bad power supply. If the power supplies fan is broken, the computers components will also behave strangley. Overheating components might work sometimes but not others, and very commonly, an overheated computer will simply shut itself off or spontaneously reboot.
Also make sure you update your virus definitions and scan your h.d.d. for viruses.
Download and run HijackThis
http://www.spychecker.com/program/hijackthis.html
Paste your log file here and although I cant tell everything that is wrong Im sure someone in here can read the file. You may have been Hijacked.
Download, install and run Adaware http://download.com.com/3000-2144-10045...tag=button this will get rid of adware.
Also d/l, install and run Spybot S&D http://www.safer-networking.org/index.php?page=mirrors this will search for spyware on your computer.
You will be surprised at the things you will find on your computer with these free programs.
_________________
I do not fear computers. I fear the lack of them |
|
| Back to top |
|
|
norbie
1st Responder
Joined: Feb 21, 2004
Posts: 270
Location: UK
|
| Posted: Fri May 21, 2004 10:00 am Post subject: |
|
|
hi gracemovitch,
like geekgirl suggested, if you are able to download hijackthis (www.norbiesworld.co.uk/downloads/hijackthis.exe), scan your computer with it, and click on the save log button. save you log somewhere, and it will come up in notepad. copy and paste what is there into this post, and i'll anaylse it for you. 
good work geekgirl!
_________________
Norbie
----------------------------
www.norbiesworld.co.uk |
|
| Back to top |
|
|
Geekgirl
Trooper
Joined: May 16, 2004
Posts: 17
Location: USA
|
| Posted: Fri May 21, 2004 10:16 am Post subject: |
|
|
thx for the 
I knew there would be someone in here that could read the log. Like I said I can catch some things but Im still learning .........
_________________
I do not fear computers. I fear the lack of them |
|
| Back to top |
|
|
gracemovitch
Cadet
Joined: May 16, 2004
Posts: 7
Location: USA
|
| Posted: Sun May 23, 2004 12:04 pm Post subject: Thank you!!!!!!!!!! |
|
|
Thanks geekgirl and norbie, I did as you guys told me to. I scanned my computer with the program and here's the log:
Logfile of HijackThis v1.97.7
Scan saved at 12:01:21 PM, on 23/05/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\System32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\iTunes\iTunesHelper.exe
F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
F:\PROGRA~1\mcafee.com\agent\mcagent.exe
F:\WINDOWS\System32\ctfmon.exe
f:\progra~1\mcafee.com\vso\mcvsescn.exe
F:\Program Files\MSN Messenger\MsnMsgr.Exe
F:\Program Files\GetRight\getright.exe
F:\Program Files\GetRight\getright.exe
f:\progra~1\mcafee.com\vso\mcvsftsn.exe
F:\WINDOWS\System32\GEARSEC.EXE
F:\Program Files\Messenger\msmsgs.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\iPod\bin\iPodService.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
F:\Documents and Settings\Grace\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - f:\program files\mcafee.com\mps\mcbrhlpr.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - f:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] F:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] F:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] F:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NeroCheck] F:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] F:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VSOCheckTask] "f:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "f:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] f:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] F:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] F:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] F:\Program Files\McAfee.com\MPS\mscifapp.exe /embedding
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: E-Color.lnk = F:\Common\IconMgr.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = F:\Program Files\GetRight\getright.exe
O4 - Global Startup: InterVideo WinScheduler.lnk = F:\Program Files\InterVideo\MSIPVS\WinScheduler.exe
O8 - Extra context menu item: Download with GetRight - F:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - F:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: Research (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {0713E8D2-850A-101B-AFC0-4210102A8DA7} (Microsoft ProgressBar Control, version 5.0 (SP2)) - http://download.mcafee.com/molbin/Share...mCtl32.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc...wflash.cab
O16 - DPF: {F42AE915-7094-490F-B8EE-28D4DCF7B95A} (VaroMPlay Control) - http://vmms.nate.com:8282/avmail/avmail...layX10.cab
I'm looking forward for your replies! Thanks alot!
  |
|
| Back to top |
|
|
norbie
1st Responder
Joined: Feb 21, 2004
Posts: 270
Location: UK
|
| Posted: Sun May 23, 2004 4:26 pm Post subject: |
|
|
hi again,
heres what you need to fix in your hijackthis log:
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
This is the one thats been causing you problems. It's a worm that shuts your computer down now and then
Fix that, restart your computer, and paste a new log here.
You have nothing else bad in your log though, so well done!
_________________
Norbie
----------------------------
www.norbiesworld.co.uk |
|
| Back to top |
|
|
gracemovitch
Cadet
Joined: May 16, 2004
Posts: 7
Location: USA
|
| Posted: Mon May 24, 2004 12:05 pm Post subject: |
|
|
Hi Norbie, I also downloaded the other programs and I found out there were programs like hacker.ag, alexa, etc. on the computer and i cleaned them. Again, thank you very much!
anyways, here's the log:
Logfile of HijackThis v1.97.7
Scan saved at 12:00:51 PM, on 24/05/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\System32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\iTunes\iTunesHelper.exe
F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
F:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
f:\progra~1\mcafee.com\vso\mcvsescn.exe
F:\PROGRA~1\mcafee.com\agent\mcagent.exe
F:\WINDOWS\System32\ctfmon.exe
F:\Program Files\MSN Messenger\MsnMsgr.Exe
F:\Program Files\GetRight\getright.exe
F:\Program Files\GetRight\getright.exe
f:\progra~1\mcafee.com\vso\mcvsftsn.exe
F:\WINDOWS\System32\GEARSEC.EXE
f:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
F:\Program Files\Messenger\msmsgs.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\iPod\bin\iPodService.exe
f:\PROGRA~1\mcafee.com\vso\mcshield.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
F:\Documents and Settings\Grace\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - f:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - f:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] F:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] F:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] F:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NeroCheck] F:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] F:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VSOCheckTask] "f:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "f:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] f:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] F:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] F:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] F:\Program Files\McAfee.com\MPS\mscifapp.exe /embedding
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: E-Color.lnk = F:\Common\IconMgr.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = F:\Program Files\GetRight\getright.exe
O4 - Global Startup: InterVideo WinScheduler.lnk = F:\Program Files\InterVideo\MSIPVS\WinScheduler.exe
O8 - Extra context menu item: Download with GetRight - F:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - F:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {0713E8D2-850A-101B-AFC0-4210102A8DA7} (Microsoft ProgressBar Control, version 5.0 (SP2)) - http://download.mcafee.com/molbin/Share...mCtl32.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc...wflash.cab
O16 - DPF: {F42AE915-7094-490F-B8EE-28D4DCF7B95A} (VaroMPlay Control) - http://vmms.nate.com:8282/avmail/avmail...layX10.cab |
|
| Back to top |
|
|
norbie
1st Responder
Joined: Feb 21, 2004
Posts: 270
Location: UK
|
| Posted: Mon May 24, 2004 3:12 pm Post subject: |
|
|
thats all clear now.
if you have any other problems let me know
_________________
Norbie
----------------------------
www.norbiesworld.co.uk |
|
| Back to top |
|
|
gracemovitch
Cadet
Joined: May 16, 2004
Posts: 7
Location: USA
|
| Posted: Mon May 24, 2004 5:18 pm Post subject: |
|
|
Hey norbie,
after I fixed the problem this morning and I used my computer again, the computer restarted itself again and it went back to acting the way it used to. I then scanned it with the hijack program again and I found that the worm was still there.  I fixed the program again and deleted all backup files that was automatically created, and I scanned it again, and the program doesn't seem to be there anymore. What should I do if the problem persists? |
|
| Back to top |
|
|
norbie
1st Responder
Joined: Feb 21, 2004
Posts: 270
Location: UK
|
| Posted: Tue May 25, 2004 4:37 am Post subject: |
|
|
hi again,
try right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - then click ok.
this may stop it from coming back.
i am concerned however that you have an older version of windows xp. you can get an update called service pack 1 (sp1) which fixes lots of problems and stops you from getting certain viruses.
I strongly reccomend you either download it for free here:
http://www.microsoft.com/windowsxp/pro/...efault.asp
or order a cd from microsoft here:
(if you're in england)
http://www.microsoft.com/uk/windowsxp/s...s/sp1.mspx
(if you're in america)
http://www.microsoft.com/WindowsXP/pro/...rdercd.asp
*note* the english cd is free!
there will soon be an update for that as well called service pack 2, but sp1 should do for now!
As you have problems staying on your computer for long amounts of time, it might be an idea to order the cd, or get someone with broadband to download it for you!
_________________
Norbie
----------------------------
www.norbiesworld.co.uk |
|
| Back to top |
|
|
PriZm
Trooper
Joined: May 26, 2004
Posts: 11
Location: Canada
|
| Posted: Thu May 27, 2004 3:49 am Post subject: |
|
|
If you are infected with such a worm, a very good free virus scanning program that might be able to remove it permanently is Panda ActiveScan.
Go to http://www.pandasoftware.com/activescan...ncipal.htm
It is perfectly safe and may solve your problem.
Good luck. |
|
| Back to top |
|
|
gracemovitch
Cadet
Joined: May 16, 2004
Posts: 7
Location: USA
|
| Posted: Thu May 27, 2004 9:01 pm Post subject: |
|
|
Hello again,
thank you geekgirl and especially you, norbie, for helping with my computer. I really appreciate the time and efforts to put into this, and so far thanks to you, my computer hasn't experienced any more difficulties at the present time. Good luck on helping the other people who are also experiencing computer problems like me (especially those who don't know much about it either like I do).
  Gracemovitch
P.S: Thanks PriZm, I'll keep your advice in mind. |
|
| Back to top |
|
|
|
|
You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0.
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
