Jump to content


Photo

Computer Shuts off randomly


  • This topic is locked This topic is locked
31 replies to this topic

#1 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 05 April 2010 - 01:00 PM

Hi Guys,

My computer shuts off randomly. I mainly just use it to go online. The shutting down happens randomly at any time. Sometimes when i click on firefox to open it, sometimes when it is already open, sometimes when I barely turn the computer on. Also when i try to do a Spybot s&d scan. I will run spybot, leave the computer, and when i come back, the computer is off.

[Update: I just tried to do another spybot scan, and stayed by the computer the whole time, this time the computer froze about half way. I had to forcibly shut it down, and turn it back on]

Also, lots of times when I barely turn on the computer it shuts off. Like a couple of seconds After i hit the power button, it shuts off, even if it has been off the entire night. SO turning on the computer is a problem too.

Hopefully you guys can help me diagnose. I will really appreciate it. Thanks a lot.

By the way, recently I replaced my hard drive since the old one died on me.

Thanks for your help guys.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:40:17 PM, on 4/5/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 3057 bytes



9999999999999999999999999999999999999999999999999999999999999999999999999999999999



Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3957

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/5/2010 12:31:29 PM
mbam-log-2010-04-05 (12-31-29).txt

Scan type: Quick scan
Objects scanned: 97528
Time elapsed: 5 minute(s), 44 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


99999999999999999999999999999999999999999999999999999999999999999999

[Update: I scanned my computer with Panda Online Scanner as suggested in FAQ. At the end it did not give me results that i could past here, but it did say this at the results page: "Today you are not infected. We have detected that the AntiVir Desktop protection on your PC is enabled and up-to-date."]

Edited by TimmU, 05 April 2010 - 04:26 PM.


#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,490 posts

Posted 08 April 2010 - 01:52 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.

If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.


[this is an automated reply]
This is an automated message. It does not count as help.

#3 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 14 April 2010 - 11:48 AM

Hi,

Sorry about the wait, we’re very busy. If you still need help please post a fresh HiJackThis log and I will review it.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#4 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 17 April 2010 - 09:38 PM

jedi, I understand. Thank you. I appreciate your help. Here is the fresh HijackTHis log requested:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:30:31 PM, on 4/17/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 3130 bytes

#5 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 18 April 2010 - 05:41 AM

Hi again,

Download OTL.exe by OldTimer to your Desktop.
  • Close all windows and double click OTL.exe.
  • Click Run Scan and let the program run uninterrupted.
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#6 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 18 April 2010 - 12:49 PM

jedi, thanks again. Here are the logs requested:

OTL logfile created on: 4/18/2010 12:34:19 PM - Run 1
OTL by OldTimer - Version 3.2.1.2 Folder = C:\Documents and Settings\Gateway\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

255.00 Mb Total Physical Memory | 126.00 Mb Available Physical Memory | 49.00% Memory free
626.00 Mb Paging File | 419.00 Mb Available in Paging File | 67.00% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.88 Gb Total Space | 51.22 Gb Free Space | 91.66% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: GATEWAY-3F02776
Current User Name: Gateway
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/04/18 12:32:36 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Gateway\Desktop\OTL.exe
PRC - [2009/07/21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009/05/13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009/03/02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008/04/14 07:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010/04/18 12:32:36 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Gateway\Desktop\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - [2009/07/21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009/05/13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)


========== Driver Services (SafeList) ==========

DRV - [2010/02/20 21:00:27 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/06/30 09:37:16 | 000,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\pavboot.sys -- (pavboot)
DRV - [2009/05/11 10:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/03/30 10:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2009/02/13 12:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/04/13 17:05:36 | 000,154,624 | ---- | M] (Lucent Technologies) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wlluc48.sys -- (wlluc48)
DRV - [2003/04/28 23:39:24 | 000,625,920 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2001/08/17 07:19:48 | 000,174,464 | ---- | M] (ESS Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\es198x.sys -- (allegro) ESS Allegro Audio Driver (WDM)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========
a
FF - prefs.js..browser.startup.homepage: "http://ww.yahoo.com"

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/04/03 11:02:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/04/03 11:02:50 | 000,000,000 | ---D | M]

[2010/02/18 01:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Gateway\Application Data\Mozilla\Extensions
[2010/02/18 01:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Gateway\Application Data\Mozilla\Firefox\Profiles\7w8lt9e1.default\extensions
[2010/02/18 01:20:58 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2010/03/25 22:40:50 | 000,380,956 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 13124 more lines...
O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.micr...heckControl.cab (Windows Genuine Advantage Validation Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/02/17 23:45:40 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/04/18 12:32:31 | 000,562,176 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Gateway\Desktop\OTL.exe
[2010/04/14 18:53:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010/04/05 14:30:06 | 000,028,552 | ---- | C] (Panda Security, S.L.) -- C:\WINDOWS\System32\drivers\pavboot.sys
[2010/04/05 14:29:19 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2010/04/05 12:39:31 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/04/01 08:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/02/17 23:51:21 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/02/17 23:50:16 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/02/17 23:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/04/18 12:32:36 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Gateway\Desktop\OTL.exe
[2010/04/18 12:05:10 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/04/18 12:05:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/04/18 10:17:23 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Gateway\ntuser.ini
[2010/04/18 10:17:22 | 005,505,024 | -H-- | M] () -- C:\Documents and Settings\Gateway\NTUSER.DAT
[2010/04/17 23:24:14 | 003,221,854 | -H-- | M] () -- C:\Documents and Settings\Gateway\Local Settings\Application Data\IconCache.db
[2010/04/14 19:10:33 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/04/14 17:28:34 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/04/05 12:39:31 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\Gateway\Desktop\HijackThis.lnk
[2010/03/30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/03/30 00:45:52 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/03/25 22:40:50 | 000,380,956 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/03/19 18:05:50 | 004,874,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmp.dll
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/04/05 12:39:31 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\Gateway\Desktop\HijackThis.lnk
[2010/02/17 23:56:00 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Gateway\ntuser.ini
[2010/02/17 23:55:58 | 005,505,024 | -H-- | C] () -- C:\Documents and Settings\Gateway\NTUSER.DAT
[2010/02/17 23:55:58 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Gateway\NTUSER.DAT.LOG
[2003/04/28 23:28:52 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll
< End of report >


99999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999


OTL Extras logfile created on: 4/18/2010 12:34:19 PM - Run 1
OTL by OldTimer - Version 3.2.1.2 Folder = C:\Documents and Settings\Gateway\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

255.00 Mb Total Physical Memory | 126.00 Mb Available Physical Memory | 49.00% Memory free
626.00 Mb Paging File | 419.00 Mb Available in Paging File | 67.00% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.88 Gb Total Space | 51.22 Gb Free Space | 91.66% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: GATEWAY-3F02776
Current User Name: Gateway
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}" = iTunes
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ATI Display Driver" = ATI Display Driver
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/28/2010 4:09:10 PM | Computer Name = GATEWAY-3F02776 | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download....uthrootseq.txt>
with error: This operation returned because the timeout period expired.

Error - 4/5/2010 10:26:15 AM | Computer Name = GATEWAY-3F02776 | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download....uthrootseq.txt>
with error: This operation returned because the timeout period expired.

Error - 4/9/2010 4:51:04 PM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 490
Description = svchost (1116) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
for read / write access failed with system error 32 (0x00000020): "The process
cannot access the file because it is being used by another process. ". The open
file operation will fail with error -1032 (0xfffffbf8).

Error - 4/9/2010 4:51:04 PM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 439
Description = Catalog Database (1116) Unable to write a shadowed header for file
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb. Error
-1032.

Error - 4/9/2010 4:51:04 PM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 470
Description = Catalog Database (1116) Database C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
is partially attached. Attachment stage: 1. Error: -1032.

Error - 4/12/2010 6:15:01 PM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 490
Description = svchost (1120) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
for read / write access failed with system error 32 (0x00000020): "The process
cannot access the file because it is being used by another process. ". The open
file operation will fail with error -1032 (0xfffffbf8).

Error - 4/12/2010 6:15:21 PM | Computer Name = GATEWAY-3F02776 | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download....uthrootseq.txt>
with error: This operation returned because the timeout period expired.

Error - 4/14/2010 7:54:26 PM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 490
Description = svchost (1124) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
for read / write access failed with system error 32 (0x00000020): "The process
cannot access the file because it is being used by another process. ". The open
file operation will fail with error -1032 (0xfffffbf8).

Error - 4/17/2010 6:02:55 PM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 490
Description = svchost (1120) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
for read / write access failed with system error 32 (0x00000020): "The process
cannot access the file because it is being used by another process. ". The open
file operation will fail with error -1032 (0xfffffbf8).

Error - 4/18/2010 9:42:26 AM | Computer Name = GATEWAY-3F02776 | Source = ESENT | ID = 490
Description = svchost (1116) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
for read / write access failed with system error 32 (0x00000020): "The process
cannot access the file because it is being used by another process. ". The open
file operation will fail with error -1032 (0xfffffbf8).

[ System Events ]
Error - 4/1/2010 6:46:46 PM | Computer Name = GATEWAY-3F02776 | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: The embedded controller (EC) hardware didn't respond
within the timeout period. This may indicate an error in the EC hardware or firmware,
or possibly a poorly designed BIOS which accesses the EC in an unsafe manner.
The EC driver will retry the failed transaction if possible.

Error - 4/10/2010 4:25:36 PM | Computer Name = GATEWAY-3F02776 | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 4/10/2010 4:25:36 PM | Computer Name = GATEWAY-3F02776 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 13 minutes. NtpClient has no source of accurate
time.


< End of report >

#7 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 19 April 2010 - 06:50 AM

Hi again,

Can you tell me how old this PC is?

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#8 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 19 April 2010 - 10:18 AM

hey jedi. Since i got this computer already used I'm not really sure. The laptop's model number is Gateway 450sx4, but I couldn't find anything pertaining age with that. I do remember that when i got it, I had to install XP because it had Windows 2000. So at least we know that much... 10 years or older.

#9 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 20 April 2010 - 10:11 AM

Hi again,

I suspect this computer may be nearing the end of its useful life. The normal cause of random shutdowns, especially in older computers is
>Overheating triggers auto-shutdown to protect the CPU;
>Memory module going bad;
>Power supply going bad.

Out of these options I suspect the power supply may be dying too. Can you tell me how the HD died?

One of the error notices possibly could be fixed with a BIOS update, others appear to be Cryptographic Service Errors which there are a number of possible fixes for. But I suspect they are more to do with the random shutdowns rather than actually causing them.

Before we try to troubleshoot, the obvious question is, are you in a position to replace this computer?

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#10 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 20 April 2010 - 11:55 AM

Hey jedi. Thanks a lot.

I'm not sure how or why the HD died (it was probably just old), but i can give you the symptoms. I actually posted them here not too long ago, and TheJoker was kind enough to give me advice. If you'd like you can check it out here:

http://www.spywarein...=1

As far as replacing the computer, not at the moment. I know it's old, but other than the HD and this shutting down thing, this computer has been pretty good. So if there is anything at all I can do, that would be great. And I really appreciate your help.

NOW that you mention a possible power supply problem.....
something I forgot to mention... sometimes the computer wont turn on. (Not shutting down right after we turn it on, but just not turn on at all). The little light that shows the computer is plugged in wont turn either, even if it is plugged in. To remedy this, I just unplug the power, take out the battery, press a button that is on the side of the battery (no idea what it does, but it helps), and then put the battery back, plug the power supply back in, and that fixes the problem, the little green light that shows the power is plugged in turns on and I can turn the computer on after that.
.... I didn't even mention it, because i have a solution for it when it happens.

Thanks a lot jedi!

Edited by TimmU, 20 April 2010 - 01:53 PM.


#11 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 21 April 2010 - 02:16 AM

OK, well I can't guarantee that I can help, but I will certainly try. You may need to spend some money at some point though.

First thing I need is some detailed system information. Please go here:
http://www.gtopala.com/
download and install SIW - System Information for Windows.

Open the program. Click File > Create Report File > HTML and save it to Desktop. I need to see that file, but it contains confidential information about your PC (Licence Key for example) so please do not post it here, I will PM you with an e-mail address, please attach it and send it, let me know here when you have done so.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#12 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 21 April 2010 - 10:36 AM

Hey jedi. No guarantees, I understand. I appreciate any effort. Thanks a lot.

I sent you the file. The subject is pretty clear so you'll know its from me right away.

Thank you!!

#13 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 21 April 2010 - 11:12 PM

Hi again,

Thanks, I got it. I probably won't have a chance to study it until the weekend, so don't panic if you don't get a reply straight away.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#14 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,269 posts

Posted 22 April 2010 - 11:19 AM

While we are waiting for jedi - Removing and replacing your cmos battery has the effect of resettting your BIOS settings to their factory defaults. To make that permanent: Go into your BIOS Setup - the bootup screen will tell you (briefly) what key to hit. In the BIOS Setup, go to the Exit tab, select 'Load defaults'. Then do 'Save and Exit'.

It is very possible that your cmos battery is worn out, although the usual symptom would be system tray clock running slow. You should try replacing it. Your local computer store should carry them; they cost around $6. For instance, http://radioshack.le...px?Search=CMOS. The model number to get is on the face of your battery.

jedi will say if he agrees. Good luck!

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#15 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 22 April 2010 - 08:37 PM

Jedi, Alright, no worries, thanks a lot.

cnm, thanks so much for your input!! I really appreciate it. Forgive me for not understanding... I have not removed and replaced the cmos battery at all (in my previous post i was talking about the main battery, not cmos). Do you still want me to reset BIOS to original factory defaults? If so, please let me know and I'll do it.

Also, the system tray clock is fine. Should i go ahead and replace the cmos battery anyway? And if i do this, do i still need to set BIOS to defaults? (Before or after)? Or like you said, should I wait to see if jedi agrees?

Ha, maybe I'm reading too much into it...

Thanks for your help guys!

#16 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,269 posts

Posted 22 April 2010 - 09:41 PM

Sorry, I thought you were talking about cmos battery - didn't realize you meant main battery. I'm a desktop person - And no, definitely leave the cmos battery alone if the clock is keeping time.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#17 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 23 April 2010 - 11:06 AM

haha! Its cool cnm. Thanks anyway. I appreciate it nonetheless.

#18 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 24 April 2010 - 08:31 AM

OK, I don't think the CMOS battery is the problem, what you are doing with the button on the battery is pressing reset, if you have to keep doing this it may mean the battery is failing.

Please test the battery using the Power Options method described in the first part of this video here:
http://www.ehow.com/...html?cp=1&pid=1

Please let me know the results, i.e. is it losing more than 10% of charge in ten minutes, or more than 1% per minute?

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#19 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 25 April 2010 - 01:02 PM

Hi jedi,

It started at 99% powered. In ten minutes it ended at 92%. So thats 7% in 10 mins. So I think we are good.

Thanks jedi

#20 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 28 April 2010 - 02:11 AM

Hi again,

Well, that's not brilliant, but it's within the parameters. Next, let's check the RAM.

You will need to create a bootable CD to run Windows Memory Diagnostic. Are you able to create CDs on your PC, or do you have access to a PC that can do this?

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#21 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 29 April 2010 - 07:57 PM

Hey jedi.

I've never tried on this computer, but maybe. If not, I think I can have access to another computer that can.

Hey and you know what, I just noticed that the time on this computer is off by like 25 minutes. Wierd... It was good before when cnm asked me to check, but now its off.

#22 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 02 May 2010 - 07:07 AM

Hi again,

That's curious. Please reset the clock to the right time and keep an eye on it, let me know if it changes again.

Please read and familiarise yourself with the first part of this information - Quick Start Information:
http://oca.microsoft.../en/windiag.asp
You will need to download the ISO image and create a CD of it. The instructions are contained in a separate link mentioned in this section:

If you want to create a CD-ROM that you can start your computer from, you must use additional software to create this CD-ROM from the ISO 9660 image, which is named Windiag.iso. To create this CD-ROM from the image, you can use the Cdburn.exe utility, which is provided as part of the Windows Server 2003 Resource Kit Tools. Instructions for downloading and installing these tools are available at the Microsoft Web site(http://www.microsoft.com/). Instructions for using Cdburn.exe are included in the download package. In addition, you must have a CD-ROM drive that can write to CD-ROMs. These drives are typically called CD-R or CD-RW drives. Your CD-ROM drive must also support CD-ROMs that you can boot from. Consult the documentation for your CD-ROM drive for more information.


Let me know if there's anything you're not sure of, if not go ahead and create the CD. And let me know about the clock, if it loses time again we'll have to think about replacing the CMOS battery.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#23 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 04 May 2010 - 05:28 PM

jedi, just want to touch base with you. I'm going to be really busy the next couple of days. But I WILL get back to this as soon as I can. Thanks for your patience. I appreciate it.

#24 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 10 May 2010 - 12:58 PM

I will keep this topic open for a while for you.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#25 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 11 May 2010 - 12:49 PM

Hey jedi, thanks a lot.

I am a little concerned about this section:

"If Windows Memory Diagnostic detects errors in your hardware, you should correct the errors and run Windows Memory Diagnostic again until you get a report of no errors before you attempt to run Windows again. If you do not, Windows may not work correctly. ... "

I'm thinking this means that if the test finds a problem, and then if for some reason I'm not able to fix it, then windows wills stop working correctly, worst off then it is right now. I'm not sure if i want to risk having the computer worst off than it currently is just because it found a problem and we're not able to fix it. Does that make sense? Or am I reading it wrong?

Thanks for your help jedi.

#26 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 12 May 2010 - 02:19 AM

Hi again,

Well, it's relatively simple in this case, you have one RAM stick with 256mb of RAM. So we don't need to do any advanced diagnostics, if Windows Memory Diagnostic throws up errors on its first pass it will be a case of exiting the diagnostics, closing down the PC, buying a new RAM stick and replacing the old one, all of which I can talk you through. The scan is passive and won't do any damage in itself.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#27 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 12 May 2010 - 10:04 AM

OK thanks a lot jedi. So..

1. If it happens to find something wrong, and since the scan is passive and wont do damage itself, the computer wont stop working while i get the RAM stick. Is that correct?

2. I'm confused as to where the ISO 9660 image/ Windiag.iso will come from. Is that included in the Windows Server 2003 Resource Kit Tool? (I don't see any download links to it)

3. Also, do need to download the Windows Server 2003 Resource Kit Tool, or just if i don't have access to a computer that burns CDs? And, if so, do i download the whole thing? Or is there a way to download just the Cdburn.exe utility?

Thanks so much jedi! I apologize for all the questions. I appreciate your help.

Oh and by the way, I'm looking at the clock right now, and its about 4 minutes slow.

Also, i was just able to run spybot s&d without the computer freezing or shutting down... something good at least ha!

Edited by TimmU, 12 May 2010 - 11:25 AM.


#28 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 14 May 2010 - 02:53 AM

Hi again,

I think we do need to replace the CMOS battery before we do anything else. It's situated under the keyboard on these models, apparently, and you need to be careful as it seems the sockets are a little delicate. Looks like you can get one for $19 here:
http://www.mundocorp...exd.asp?id=1081
though I don't know the site so I'm not necessarily recommending you use it, possibly you can buy one locally. Alternately get a computer tech to do it for you, though obviously this will be more expensive.

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#29 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 14 May 2010 - 09:46 PM

Hey jedi. Ok Will do.

Since I replaced the hard drive successfully, i think i might try the cmos also. Last time, I was able to find a tutorial for hard drive replacement at Gateway Support website, but am having some trouble finding one to replace the cmos. Can i ask you where you found the information about the location for this model and about the delicate sockets? It might help me find out more to undertake this project. Thanks like always jedi. I appreciate it.

[EDIT]: Oh i think i found where you found that information at. techspot.com right?

Ok well, i will try to find other resources on how to replace the cmos for this model. If you know any off the top of your head please do tell. If not, thats fine, I'll search anyway.

You can close this thread if you'd like since I'm not exactly sure when I will complete this project, thought will do it as soon as possible.
-I can re-open it anyway when i've done it right?-

Thanks a lot jedi. Your awesome!!

[EDIT]---
jedi, wanted to let you know that i ordered the cmos battery and will be installing it as soon as it arrives. coming from out of country so it might be some time. thanks

Edited by TimmU, 19 May 2010 - 09:34 PM.


#30 TimmU

TimmU

    Advanced Member

  • Full Member
  • PipPipPip
  • 158 posts

Posted 04 June 2010 - 10:27 AM

Hey jedi,

just want to let you know that I've replaced the cmos battery. We've had it for about two weeks, and it worked like a charm. The computer doesn't shut off anymore, and it even turns on with no need to unplug and remove and replace the main battery.

On the first 2-3 days, we did need to unplug and remove and replace the main battery to turn the computer on. But the computer didn't shut off anymore. Now, it seams to have acclimated to everything, and no shut off, and no main battery replacement needed to turn on.

So were pretty happy. Thanks a lot jedi. Your awesome!

#31 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 04 June 2010 - 05:19 PM

That's good news. Glad we could help. :)

jedi
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.

#32 jedi

jedi

    aequam memento rebus in arduis servare mentem

  • Administrators
  • PipPipPipPipPip
  • 15,829 posts

Posted 20 June 2010 - 04:18 AM

Glad we could help. :)

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
jedi

My help is free, but if you wish to help keep these forums running please consider a donation, see This Topic for details.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button