Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] BSOD - Low Power Output! Maybe?

[Fixed] Hijackthis! Logs - [Resolved] BSOD - Low Power Output! Maybe? posted in the Security & Safety forums; Ok, so I'm just going explain this problem in point form. Computer Specs: WinXp SP2 512RAM ATI Sapphire 9600pro 256mb 80gb HDD Slave HDD: 8gb 200w PSU CD Drive DVD ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 01-27-2007
Bronze Member
My PC
 
Join Date: Jan 2007
Posts: 83
PC Experience: Some Experience
HyeVltg3 - See this Members User comments on their Profile page
Default [Resolved] BSOD - Low Power Output! Maybe?

Ok, so I'm just going explain this problem in point form.
Computer Specs:
WinXp SP2
512RAM
ATI Sapphire 9600pro 256mb
80gb HDD
Slave HDD: 8gb
200w PSU
CD Drive
DVD Drive

- First, couple of months ago my computer start to auto-restart everytime i run too many apps at the same time or even if i left it on over-night. I realized that this problem started when i inserted a new ATI Sapphire 9600pro 256mb Video Card into my comp. or thats what i think. But i didnt take any action.

-Second, Later on the restarts/crashes started to happen more often, Like if i was doing only one thing; Writing in word. It would restart/crash,. Recently its been restarting on Boot-up, Meaning that i turn on the comp and then while its loading up all the apps at startup, it crashes, so Right now I'm in Safe Mode, writting this.

- Third, Now, after reading many windows XP problem fix threads on various sites. I've come to the conclusion that my PSU is dying. So i went and ordered a 600w PSU :P but it hasnt arrived yet (no worries, i ordered it like last thrusday and waiting period is 2-3weeks :P) but while i wait I want to know if this was the right choice to make. Because I don't want this problem to continue even after I've resorted to my Plan Z(last plan i could think of; Replace PSU).My previous plans were disabling some of the components, right now im running w/o> My Video card(so its using onboard intel gfx accelerator, and this page is being viewed with 4-bit colors, so its really hard to see my periods and comas :P, and also hard to read my type-age, so please excuse the mistakes), Disabled both CD&DVD Drives, Plus my Slave 8gb HDD (:P). At the begening the problem was kind of helpful because the comp stayed on longer, after each disconnection but now its resorted back to the usual reboot-age at normal start-up.

-Fourth, On some forums it said I should ( this is the first time i made a New topic, usually i read others, by "I" i means the reader, in this case me :P confusing lol) go into Control Panel>Advanced Tab>Startup & Sys. Recov. Settings>Uncheck Auto-restart. To find what exactly the problem is, this uncheck option part displayed a sort of BSOD the next time it crashed and this is what it said (i wrote down what it said so theres no point in attaching a event1001 file, But this part of the msg appears at the bottom of the screen, because above it it just says all the actions i could take and the second option is that i should disable some components, which i've already done.):

Technical Information:
*** STOP: 0x0000008E (0xC0000005, 0xB2EF550B, 0xB20C2A20, 0x00000000)

*** system32: lzx32.sys - Address B2EF550B base at B2EF3000, DateStamp 45a25a31

Hope that helps in any way possible.

- Fifth, Theres this weird phenonmen that keeps happening, at 9pm everyday the comp crashes and after that it wont turn on again;restarts at start-up. Because lately i've been able to use normal mode if i let the comp sleep(stay off) for a long period, like these past few days i've noticed something really weird/freaky the comp can turn on perfectly everyday after 4pm-ish then it always crashes at 9pm, dont know if its a program that starts-up at 9pm, like an Anti-virus or something that kills the comp but i've checked and nothing i could find turns on at 9pm (i only check my anti-spyware/virus software :P, not that much effort used :P) but yea this has been happening for the past few days.).

- This is as far as my "story" goes :P all i can do now is wait for the PSU to arrive and wait for a solution to my problem. So now i'll just attact the "event" file that it tells me to do in the sticky thread. But in my case they were no "Event1001" files they either said "Information" or "Error". But i can only find one that indicates that the Dump file was save to so-and-so place.
Attached Files
File Type: dmp Mini012707-04.dmp (96.0 KB, 2 views)



Last edited by HyeVltg3; 01-27-2007 at 06:10 PM.
  #2  
Old 01-27-2007
madmonkey's Avatar
Site Manager
My PC
 
Join Date: Oct 2006
Location: South Wales
Posts: 6,171
PC Experience: PC Basket Ball Head!
madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page
Default KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)

Hello HyeVltg3,

Welcome to PCHF.

This problem is normally a hardware compatibility issue. However, this looks like it could be the Backdoor.Rustock.B Virus, or some variation. Please can you follow PCHF Prework on my signature and submit an AVG and HJT log for the Security team to analyse.

Also if you have any more dump files you can post, this would be great too!


__________________


Last edited by madmonkey; 01-27-2007 at 06:18 PM.
  #3  
Old 01-27-2007
Bronze Member
My PC
 
Join Date: Jan 2007
Posts: 83
PC Experience: Some Experience
HyeVltg3 - See this Members User comments on their Profile page
Default

Ummmm...Monkeyyyy....What do i do if i can't run HiJackThis in Normal Mode...because it wont start-up..im back in safe mode again.... Oh, and heres another dmp file..but this one was done in "Complete Memory Dump" option unlike my previous attachment which was "Small memory"

EDIT: I cant upload the MEMORY.DMP...its 510mb big !!!! lol
Attached Files
File Type: txt Report-Scan-20070127-144858.txt (820 Bytes, 1 views)



Last edited by HyeVltg3; 01-27-2007 at 10:03 PM.
  #4  
Old 01-27-2007
madmonkey's Avatar
Site Manager
My PC
 
Join Date: Oct 2006
Location: South Wales
Posts: 6,171
PC Experience: PC Basket Ball Head!
madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page
Default

Hey Hye, you can run Hijackthis in safe mode? You don't have any other small memory dumps?


__________________

  #5  
Old 01-27-2007
Bronze Member
My PC
 
Join Date: Jan 2007
Posts: 83
PC Experience: Some Experience
HyeVltg3 - See this Members User comments on their Profile page
Default

Yes, I have many Minixxxxxx-xx.dmp files but some dont really say much, like most say Terminal Services Sent...and other thing...would it be could to post them too? because there are many...and its good to know i can run HiJackThis in safe moe..im going to do that now.

EDIT: Here's the HiJackThis log. and some more Mini dump files.
Attached Files
File Type: log hijackthis.log (22.8 KB, 1 views)
File Type: dmp Mini012707-08.dmp (64.0 KB, 0 views)
File Type: dmp Mini012707-07.dmp (64.0 KB, 0 views)
File Type: dmp Mini012707-06.dmp (64.0 KB, 0 views)



Last edited by HyeVltg3; 01-27-2007 at 11:08 PM.
  #6  
Old 01-27-2007
madmonkey's Avatar
Site Manager
My PC
 
Join Date: Oct 2006
Location: South Wales
Posts: 6,171
PC Experience: PC Basket Ball Head!
madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page madmonkey - See this Members User comments on their Profile page
Default

Hey Hye, just post a couple of the latest.

I'll transfer this thread to the HJT forum so that a member of security can analyse this log.


__________________

  #7  
Old 01-28-2007
Pancake's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 3,584
PC Experience: Elite PC Guru
Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page
Default

Download
http://www.uploads.ejvindh.net/rustbfix.exe
...and save it to your desktop.

Alternate download locations if that one is not available:
http://andymanchesta.com/uploads.ejvindh/Rustbfix.zip
http://andymanchesta.com/uploads.ejvindh/Rustbfix.exe

http://uploads.ejvindh.andymanchesta.com/Rustbfix.zip
http://uploads.ejvindh.andymanchesta.com/Rustbfix.exe

Double click on rustbfix.exe to run the tool. If a Rustock.b-infection
is found, you will shortly hereafter be asked to reboot the computer.
The reboot will probably take quite a while, and perhaps 2 reboots will
be needed. But this will happen automatically. After the reboot 2
logfiles will open (%root%\avenger.txt & %root%\rustbfix\pelog.txt). Post
the content of these logfiles along with a new HijackThis log.


-----------------------------------

Download combofix from here.
**Save it directly to your desktop**
Double click on combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log in your next reply
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall


__________________
  • An Australian Member of
  • and
My real name is Eddy

Last edited by Pancake; 01-28-2007 at 01:16 AM.

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 07:41 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top