Hello
About 2 days ago my computer just turned off without warning, I thought it was weird but turned it back on and continued. About 10 minutes ago it happened again!
I am just about to reinstall my motherboard and video drivers (After uninstalling them of course) and then I will post my Hijack logs.
I have gone into event viewer and there is only one thing that looks to be related and this comes under the 'System' part and the type is an error and the source is 'MrxSmb'. The description is:

The master browser has received a server announcement from the computer COWBURN-UIFZUDO that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6DE9EB49-DE7. The master browser is stopping or an election is being forced.

For more information, see Help and Support Center at Events And Errors Message Center: Basic Search.


What I find odd is that the name "COWBURN-UIFZUDO' is what's given to my dads computer when I go to the setup in http://192.168.1.254/

I hope you can understand this post as i'm sure I could've worded it a lot better

Thanks

Hey Cowburn

Make sure you follow prework to produce the logs, if you are running xp then all three logs are required - spysweeper, hjt and avg report.

Chris

Hi Chris (And anyone else who is reading this).
I managed to do the AVG and Spy sweeper scan in safe mode and then Hijack this in in normal mode.
However the prework instructions for AVG were different than what I saw on my screen and I couldn't figure out how to save that report, but the scan was clean so I don't think that will matter too much. I have attached the spy sweeper and Hijack logs.
If you need anything else I am willing to comply

Thanks a lot.

Attached Files

	hijackthis.log (6.5 KB, 3 views)
	Spy Sweeper Session Log.txt (2.1 KB, 2 views)

if you could do me a favor and upload the following file to Online malware scan ; it's pretty simple, just click the browse link at the top, navigate to that file, and hit upload. Then paste back here what it says.

C:\WINDOWS\system32\pr2agnqb.exe

Let me know what it says, because I can't find anything on it.


Thanks,

v

File: pr2agnqb.exe Status: OK
MD5 d66bb6227ecbe20d612370fe36185389 Packers detected: -

AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

The most frustrating thing about this problem is that because it didn't occur again until 2 days after, it's hard to know if the problem is solved from reinstalling drivers until an amount of time.

well, if you could post a hjt log, we could be sure, but I'm leaning towards some sort of hardware failure.

Please do this:

· Click http://www.spywareinfo.com/~merijn/files/HijackThis.exe to download HJTsetup.exe
· Save HJTsetup.exe to your desktop.
· Doubleclick on the HJTsetup.exe icon on your desktop.
· By default it will install to C:\Program Files\Hijack This.
· Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
· Put a check by Create a desktop icon then click Next again.
· Continue to follow the rest of the prompts from there.
· At the final dialogue box click Finish and it will launch Hijack This.
· Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
· Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
· Come back here to this thread and Paste the log in your next reply.
· DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.