Member Panel

richard_p

I have had an acer laptop for about 9 months now. Everything has been completely fine, apart from one recent problem. The computer randomly cuts out, it doesnt shut down, it just cuts out. It cant be a power problem because it would run on the battery (it works on the battery fine anyway). After it has randomly cut out, I reboot it, it goes through a windows disk checker thing, then finally runs windows. I have found that everytime it cuts out, on the event monitor on administerative tools, it runs a file bcm4sbxp. I have searched for this file on the net and I is apparently a driver that is for my network card but virus' can hide behind it. It should only appear in windows/system32/drivers, which it did but also in windows/lan. I deleted the windows/lan one, but that hasnt made a difference. I have found that it doesnt happen if I am not using the wired LAN. It is very annoying especially when I am doing somthing important and I cant imagine what it is doing to the hard drive. It is a hardware or software problem?, virus of some sort?. Any ideas anyone?

asa_sniper

You can try posting a hijackthis log

http://www.merijn.org/files/hijackthis.zip

But it seems hardware related to me. Since it just "cuts" out.

You may want to stick with one posting ( i know somtimes it just posts them) But we will work in this post from now on ok.

Less confusing.

richard_p · 04:12 PM

LOG REMOVED, REPLACED BY ATTACHEMENT.
PLEASE ADD LOGS AS ATTACHEMENTS TO YOUR POSTS.
BLUEFISH

asa_sniper

OK Ok I admit this may be your problem lol.

You might have to wait for Joe or one of the other Hijackthis experts as I know some but not all. I know you have wayyy to many startup programs so its also get very hot as well.

I am guessing these are not supposed to be there, but you have to start doing the prework to see what it comes up with and post another log after your done.

O1 - Hosts: 127.0.0.5 n-glx.s-redirect.com
O1 - Hosts: 127.0.0.5 x.full-tgp.net
O1 - Hosts: 127.0.0.5 counter.sexmaniack.com
O1 - Hosts: 127.0.0.5 autoescrowpay.com
O1 - Hosts: 127.0.0.5 www.autoescrowpay.com
O1 - Hosts: 127.0.0.5 www.awmdabest.com
O1 - Hosts: 127.0.0.5 www.sexfiles.nu
O1 - Hosts: 127.0.0.5 awmdabest.com
O1 - Hosts: 127.0.0.5 sexfiles.nu
O1 - Hosts: 127.0.0.5 allforadult.com
O1 - Hosts: 127.0.0.5 www.allforadult.com
O1 - Hosts: 127.0.0.5 www.iframe.biz
O1 - Hosts: 127.0.0.5 iframe.biz
O1 - Hosts: 127.0.0.5 www.newiframe.biz
O1 - Hosts: 127.0.0.5 newiframe.biz
O1 - Hosts: 127.0.0.5 www.vesbiz.biz
O1 - Hosts: 127.0.0.5 vesbiz.biz
O1 - Hosts: 127.0.0.5 www.pizdato.biz
O1 - Hosts: 127.0.0.5 pizdato.biz
O1 - Hosts: 127.0.0.5 www.awmcash.biz
O1 - Hosts: 127.0.0.5 awmcash.biz
O1 - Hosts: 127.0.0.5 buldog-stats.com
O1 - Hosts: 127.0.0.5 www.buldog-stats.com
O1 - Hosts: 127.0.0.5 fregat.drocherway.com
O1 - Hosts: 127.0.0.5 ****mania.biz
O1 - Hosts: 127.0.0.5 www.****mania.biz
O1 - Hosts: 127.0.0.5 toolbarpartner.com
O1 - Hosts: 127.0.0.5 www.toolbarpartner.com
O1 - Hosts: 127.0.0.5 www.megapornix.com
O1 - Hosts: 127.0.0.5 megapornix.com
O1 - Hosts: 127.0.0.5 www.sp2****ed.biz
O1 - Hosts: 127.0.0.5 sp2****ed.biz
O1 - Hosts: 127.0.0.5 greg-tut.com
O1 - Hosts: 127.0.0.5 www.greg-tut.com
O1 - Hosts: 127.0.0.5 nylonsexy.com
O1 - Hosts: 127.0.0.5 www.nylonsexy.com
O1 - Hosts: 127.0.0.5 vparivalka.com
O1 - Hosts: 127.0.0.5 www.vparivalka.com
O1 - Hosts: 127.0.0.5 iframeprofit.com
O1 - Hosts: 127.0.0.5 www.iframeprofit.com
O1 - Hosts: 127.0.0.5 topsearch10.com
O1 - Hosts: 127.0.0.5 www.topsearch10.com
O1 - Hosts: 127.0.0.5 statscash.biz
O1 - Hosts: 127.0.0.5 www.statscash.biz
O1 - Hosts: 127.0.0.5 vxiframe.biz
O1 - Hosts: 127.0.0.5 www.vxiframe.biz
O1 - Hosts: 127.0.0.5 crazy-toolbar.com
O1 - Hosts: 127.0.0.5 www.crazy-toolbar.com
O1 - Hosts: 127.0.0.5 topcash.biz
O1 - Hosts: 127.0.0.5 www.topcash.biz
O1 - Hosts: 127.0.0.5 loadcash.biz
O1 - Hosts: 127.0.0.5 www.loadcash.biz
O1 - Hosts: 127.0.0.5 txiframe.biz
O1 - Hosts: 127.0.0.5 www.txiframe.biz
O1 - Hosts: 127.0.0.5 procounter.biz
O1 - Hosts: 127.0.0.5 www.procounter.biz
O1 - Hosts: 127.0.0.5 advadmin.biz
O1 - Hosts: 127.0.0.5 www.advadmin.biz
O1 - Hosts: 127.0.0.5 trafficbest.net
O1 - Hosts: 127.0.0.5 www.trafficbest.net
O1 - Hosts: 127.0.0.5 besthvac.com
O1 - Hosts: 127.0.0.5 www.besthvac.com
O1 - Hosts: 127.0.0.5 traff4.com
O1 - Hosts: 127.0.0.5 www.traff4.com
O1 - Hosts: 127.0.0.5 ambush-script.com
O1 - Hosts: 127.0.0.5 www.ambush-script.com
O1 - Hosts: 127.0.0.5 beehappyy.biz
O1 - Hosts: 127.0.0.5 www.beehappyy.biz
O1 - Hosts: 127.0.0.5 tracktraff.cc
O1 - Hosts: 127.0.0.5 www.tracktraff.cc
O1 - Hosts: 127.0.0.5 allcount.net
O1 - Hosts: 127.0.0.5 www.allcount.net
O1 - Hosts: 127.0.0.5 onedayoffer.biz
O1 - Hosts: 127.0.0.5 www.onedayoffer.biz

http://www.pchelpforum.com/hijackthi...r-hjt-log.html

richard_p · 04:14 PM

yeh i was a bit surprised by the number of them, here is a relog

LOG REMOVED, REPLACED BY ATTACHEMENT.
PLEASE POST LOGS AS ATTACHEMENTS TO YOUR POSTS.
BLUEFISH

joe5

There are a couple of more things on there , boot in safemode (hit f8 when booting up) and then fix these with hjt:

O4 - HKLM\..\Run: [rtf32.exe] rtf32.exe
O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearc...p=ZBzeb032YYGB
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache...nsFWBInitialSe tup1.0.0.15.cab

After that delete these files:
(if present)

ibm00000.exe
ibm00001.dll
ibm00001.exe
ibm00002.dll
tmp.tmp

From this folder:

C:\Program Files\Common Files\Microsoft Shared\Web Folders

And also delete this file:

C:\WINDOWS\system32\rtf32.exe

Then reboot , and post a new hjt log by attaching it to a post.

Member Panel

Sponsors and Ads

Noticeboard