Forum Home
Press F1
 
Thread ID: 105942 2009-12-19 08:57:00 Crashing. Mister (15201) Press F1
Post ID Timestamp Content User
841235 2009-12-19 08:57:00 Hey all, I've asked about this before, but it didn't worry me as much . Now it's really starting to bother me .

My computer, is just starting to crash or freeze, nothing will work until I force a shutdown . Which I know can't be good for the computer . It use to freeze for 15-20 seconds, now waiting does nothing . :badpc:

I've tried google'ing the problem, but I think it's more of a specific problem . So I'll try to post as much data about my computer as possible . Because I really hate forcing a shutdown :mad:

My computer is basically used for 2 things, Gaming and Web Browsing .
I currently have installed MSSE, as my only virus protection . And it comes up with no issues . I had NOD32 but I tried uninstalling and going back to the programs I had before the crashing started .

Computer Specs:

Asus P5P43TD Motherboard, Socket 775, 1333MHz FSB, 4xDIMM DDR3, PCIe-16, 3xPCI, 2xPCIe-1, 12xUSB2, Audio, 1xATA, 6xSATA, ATX

Intel Core 2 Quad Q8400 2 . 66 GHz, 1333MHz FSB, Socket 775

Gigabyte GV-N26OC-896I Video Card, GeForce GTX 260, 896MB, DDR3, PCIe-16, DVI, SLI ready, HDMI

Microsoft Windows XP Home

OCZ Platinum Kit, 2x2GB, DDR3-1600, PC3-12800, CL7, DIMM, XTC Heat Spreader

Seagate Barracuda 7200 . 12 ST3500418AS Hard Disk Drive, 500GB, 7200rpm, 16MB Cache, SATA-2

I'll post a Hi-Jack this log, just in case there's something there .

Logfile of Trend Micro HijackThis v2 . 0 . 2
Scan saved at 9:54:03 PM, on 12/19/2009
Platform: Windows XP SP3 (WinNT 5 . 01 . 2600)
MSIE: Internet Explorer v6 . 00 SP3 (6 . 00 . 2900 . 5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss . exe
C:\WINDOWS\system32\winlogon . exe
C:\WINDOWS\system32\services . exe
C:\WINDOWS\system32\lsass . exe
C:\WINDOWS\system32\nvsvc32 . exe
C:\WINDOWS\system32\svchost . exe
c:\Program Files\Microsoft Security Essentials\MsMpEng . exe
C:\WINDOWS\System32\svchost . exe
C:\WINDOWS\system32\spoolsv . exe
C:\WINDOWS\Explorer . EXE
C:\WINDOWS\RTHDCPL . EXE
C:\Program Files\ASUS\EPU-4 Engine\FourEngine . exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2 . exe
C:\Program Files\D-Link\D-Link Wireless G DWA-510\AirGCFG . exe
C:\WINDOWS\system32\RUNDLL32 . EXE
C:\Program Files\Microsoft Security Essentials\msseces . exe
C:\Program Files\Windows Live\Messenger\msnmsgr . exe
C:\styeam\steam . exe
C:\Program Files\GIGABYTE\Gamer HUD Lite\HUD . exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS . exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService . exe
C:\Program Files\Bonjour\mDNSResponder . exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7 . EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7 . EXE
C:\Program Files\LogMeIn Hamachi\hamachi-2 . exe
C:\WINDOWS\system32\PnkBstrA . exe
C:\WINDOWS\system32\PnkBstrB . exe
C:\Program Files\Windows Live\Contacts\wlcomm . exe
C:\Program Files\Mozilla Firefox\firefox . exe
C:\WINDOWS\system32\svchost . exe
C:\WINDOWS\system32\wuauclt . exe
C:\WINDOWS\system32\msiexec . exe
C:\Program Files\Trend Micro\HijackThis\HijackThis . exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search . live . com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = . live . com/sphome . aspx" target="_blank">search . live . com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = * . local
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin . dll
O4 - HKLM\ . . \Run: [RTHDCPL] "C:\WINDOWS\RTHDCPL . EXE"
O4 - HKLM\ . . \Run: [Six Engine] "C:\Program Files\ASUS\EPU-4 Engine\FourEngine . exe" -r
O4 - HKLM\ . . \Run: [ANIWZCS2Service] "C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2 . exe"
O4 - HKLM\ . . \Run: [D-Link D-Link Wireless G DWA-510] "C:\Program Files\D-Link\D-Link Wireless G DWA-510\AirGCFG . exe"
O4 - HKLM\ . . \Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu . exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\ . . \Run: [nwiz] nwiz . exe /installquiet
O4 - HKLM\ . . \Run: [NvMediaCenter] "C:\WINDOWS\system32\RUNDLL32 . EXE" C:\WINDOWS\system32\NvMcTray . dll,NvTaskbarInit
O4 - HKLM\ . . \Run: [NvCplDaemon] "C:\WINDOWS\system32\RUNDLL32 . EXE" C:\WINDOWS\system32\NvCpl . dll,NvStartup
O4 - HKLM\ . . \Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces . exe" -hide
O4 - HKLM\ . . \Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\ . . \Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr . exe" /background
O4 - HKCU\ . . \Run: [Steam] "c:\styeam\steam . exe" -silent
O4 - HKCU\ . . \Run: [Google Update] "C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\Update\GoogleUpdate . exe" /c
O4 - Startup: GIGABYTE Gamer HUD Lite . lnk = C:\Program Files\GIGABYTE\Gamer HUD Lite\HUD . exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension . dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension . dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag . exe
O9 - Extra 'Tools' menuitem: @xpsp3res . dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag . exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau . dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS . exe
O23 - Service: Apple Mobile Device - Apple Inc . - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService . exe
O23 - Service: Bonjour Service - Apple Inc . - C:\Program Files\Bonjour\mDNSResponder . exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7 . EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7 . EXE
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc . - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService . exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc . - C:\Program Files\Google\Update\GoogleUpdate . exe
O23 - Service: LogMeIn Hamachi 2 . 0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc . - C:\Program Files\LogMeIn Hamachi\hamachi-2 . exe
O23 - Service: iPod Service - Apple Inc . - C:\Program Files\iPod\bin\iPodService . exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32 . exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA . exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB . exe

--
End of file - 5854 bytes



That's basically all the information I can think of right now that may be of some use . If there's any more that you need, please ask, because I really want to get this problem sorted - Without having to take it to the shop :stare:

Thank you in advance .
Mister (15201)
841236 2009-12-19 09:12:00 You can tick these then tick fix checked

Untick automatically restart .

Close browsers

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKLM\ . . \Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\ . . \Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr . exe" /background

What BIOS is on it? As 0402 fixes:

System may hang when using turbo key function with FSB 1333MHz or 1600MHz CPU . Do you use the turbo key function ?
Speedy Gonzales (78)
841237 2009-12-19 09:22:00 Thanks.

How exactly do I check my BIOS? Is it when I restart I press F something?

And I've never enabled a "Turbo" function.
Mister (15201)
841238 2009-12-19 09:31:00 It should tell you on the post screen. Reboot then wait for the info to come on the screen. Press pause. You'll see BIOS version 0xxx. Or press Del (it maybe F2 I dont know). Look in the manual. It could be anywhere in the BIOS (it maybe on the screen, when you get into the BIOS Speedy Gonzales (78)
841239 2009-12-19 09:55:00 Ok, because I browsed through the manual, and because my screen resolution on start up is all screwed up, I think my BIOS version is

0401
Mister (15201)
841240 2009-12-19 10:07:00 Update the BIOS (support.asus.com) type P5P43TD in top left select the mobo the OS and download then flash the BIOS. Reboot, then reconfigure the settings in the BIOS. If you have the P5P43TD get the BIOS for the P5P43TD. Dont flash the Pro BIOS. If you have a USB flash drive, extract whats in the zip file copy the BIOS to it. Flash it from the BIOS. Look for EZ-flash in the manual Speedy Gonzales (78)
841241 2009-12-19 10:24:00 Ok thanks I'll update tomorow. I'll have to use a friends flash drive. Mister (15201)
841242 2009-12-19 19:27:00 My computer, is just starting to crash or freeze, nothing will work until I force a shutdown .

I currently have installed MSSE, as my only virus protection . . I had NOD32

MSSE is OK but NOD32 was way better .
However in addition you should also have at least 2 antispywares .
Do you?
If not, Spybot and Malware Bytes .
pctek (84)
841243 2009-12-19 19:54:00 This may be totally wrong but thought I'd mention it anyway.
I had a machine in the workshop this week with the same problem. After testing all the hardware, running virus/spyware scans etc I couldn't find out what the problem was.
This problem happened in safe mode as well so I was leaning towards it being a hardware fault.
But with another hdd in the machine with a fresh install of windows and the machine ran perfectly.
In the end it turned out to be a rootkit virus that was in the master boot record.
Only way to fix it was to boot to the recovery console and run fixmbr /r.
Mebroot was the name of it I think.

None of the av software I ran could pick it up because of where it was hiding and loading even before windows. I tried avg, mse and nod32. Even with the hdd in another machine and a virus scan run on it didn't pick it up, not sure why though??
The only reason I picked up that it was a rootkit was because of a strange user profile under documents and settings called helpassistant.
The virus had created this and was copying everything from the main user profile to it.
I think the machine was locking up when it tried to copy the ntuser.dat file.
Because it was loading in the mbr the virus was loading and doing its thing even in safe mode!
CYaBro (73)
841244 2009-12-19 23:25:00 @pctek: I had SpySweeper but it had a anti virus which was conflicting with my main anti virus.

@CYaBro: Sounds very anoying :S But I checked my Documents and settings, and it's just my profile.

I also updated my BIOs, will play around and see if problem is gone.
Mister (15201)
1 2 3 4