Forum Home
Press F1
 
Thread ID: 127779 2012-11-13 21:25:00 reboot NZHawk (4093) Press F1
Post ID Timestamp Content User
1312307 2012-11-13 21:25:00 computer reboots - unexpectedly & inconsistently
have done:
- ram test 10 passes (6 hours...): no faults
- hard drive test: passed
- stress test: 27 minutes - didn't fail

was doing a defrag - rebooted & wouldn't acknowledge the hdd

any thought of what to check next
realized haven't scanned for malware - will do that now

any other thought?
Thank you
NZHawk (4093)
1312308 2012-11-13 21:39:00 Will it boot into safe mode / safe mode / networking without rebooting? Go into the BIOS, does it recognise the hdd?? If it doesn't try replacing the cable to the hdd. If that doesn't work its probably dead Speedy Gonzales (78)
1312309 2012-11-13 21:41:00 found some interesting errors that may help in the event viewer:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 14/11/2012
Time: 10:24:14 a.m.
User: N/A
Computer: MAPS
Description:
The following boot-start or system-start driver(s) failed to load:
szkg5
szkgfs
TfFsMon
TFSysMon

For more information, see Help and Support Center at go.microsoft.com

Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 14/11/2012
Time: 10:21:58 a.m.
User: N/A
Computer: MAPS
Description:
An error was detected on device \Device\Harddisk0\D during a paging operation.

For more information, see Help and Support Center at go.microsoft.com
Data:
0000: 03 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..€
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 d2 0a ec 08 00 00 00 .Ò.ì....
0028: d8 1f 00 00 00 00 00 00 Ø.......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 82 02 00 00 00 @..‚....
0040: 00 20 0a 12 40 03 20 40 . ..@. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 20 ad 37 8a .... *7Š
0058: 00 00 00 00 b8 55 a9 89 ....¸U©‰
0060: 00 00 00 00 69 05 76 04 ....i.v.
0068: 28 00 04 76 05 69 00 00 (..v.i..
0070: 40 00 00 00 00 00 00 00 @.......
0078: f0 00 0b 00 00 00 00 0b ð.......
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........
NZHawk (4093)
1312310 2012-11-13 21:46:00 Looks like TFSysMon belongs to threatfire. Uninstall it. The other 2 may belong to Stopzilla. Uninstall it. Run tddskiller on it (support.kaspersky.com). And do a full scan with something like malwarebytes Speedy Gonzales (78)
1312311 2012-11-13 23:24:00 Couldn't find either threatfire or Stopzilla to uninstall it.
Ran tddskiller on it: clean
Full scan with malwarebytes: Clean
NZHawk (4093)
1312312 2012-11-13 23:34:00 Those entries that you posted may still be in services then. Or in device manager, Go to device manager / select view / show hidden devices. What version of windows is it? If it's XP, click on non plug and play devices, I think it is, find those names then delete them. Then reboot.

Or if ccleaner is installed, see if any of those names appear in startup. If they do, highlight them then delete the entries
Speedy Gonzales (78)
1312313 2012-11-13 23:42:00 cool

on to it
will report back
NZHawk (4093)
1312314 2012-11-13 23:46:00 If it is XP, the entries may have an X or ! beside them. Dbl click on them. It should show the names of the drivers you posted Speedy Gonzales (78)
1312315 2012-11-14 00:33:00 Event Type: Warning
Event Source: Disk
Event ID: 51
Date: 14/11/2012
Time: 10:21:58 a.m.

An error was detected on device \Device\Harddisk0\D during a paging operation.

Hmm. What did you test the disk with?
pctek (84)
1312316 2012-11-14 00:40:00 Seatools
and
Western Digital Diagnostics as it is a WD hdd
NZHawk (4093)
1 2