Well, Im Home.. With A Fubar Pc.

Moquiao · March 2004

<div class="IPBDescription"><<.</div> hey! well i got on holiday without getting in trouble! lol

but now im home.. and nearly my entier family has been messing with my pc.

it was LOADED with crap.

so i reformatted... its np i got everything backed up on dvd-rw's...

but the problem now is.. every 10 mins.. it just shuts down... reboots itself :S

im 90% sure it aint viral.. cos i havent been surfing for it to be viral... is there any bios settings that do this? cos like... my dad thinking he could 'speed' it up... messed in my bios..

:/

help!!!!

Gadzuko · March 2004

It could very well be viral if you connected to the Internet without any kind of a firewall or anti-virus program, even for just a short time. It sucks, but these days it's dangerous to expose an unsecured computer at all.

Birdy · March 2004

Check if your comp is set up to shutdown at a specific amount of heat.
Most comps have that at a critical level but maybe your dad lowered it.
Should be viewable in bios..

Edit: Try to check if there's a setting tickied ( In XP that is )

Control Panel->System->Advanced->Startup and Recovery->Auto Restart

Wheezer · March 2004

Try resetting bios to default.
Consult the manual for your motherboard <img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' />

Birdy · March 2004

Doesn't some kind of new'ish worm auto reboots?
Forgot the name, but it's not that old.
M$ always releases some tools to remove the ones that are important.

Edit: Msblast

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'>Another removal option for more advanced users is:

1. Delete msblast.exe (usually found at c:\windows\system32\msblast.exe).
2. Delete the Windows Registry key: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows auto update" containing "msblast.exe". This is what causes the virus to start on reboot. To edit the Registry, go to Start->Run and put in "regedit".</td></tr></table><div class='postcolor'>

Moquiao · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Birdy @ Mar 25 2004, 10:02 AM)</td></tr><tr><td id='QUOTE'> Doesn't some kind of new'ish worm auto reboots?
Forgot the name, but it's not that old.
M$ always releases some tools to remove the ones that are important.

Edit: Msblast

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'>Another removal option for more advanced users is:

1. Delete msblast.exe (usually found at c:\windows\system32\msblast.exe).
2. Delete the Windows Registry key: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows auto update" containing "msblast.exe". This is what causes the virus to start on reboot. To edit the Registry, go to Start->Run and put in "regedit".</td></tr></table><div class='postcolor'>  </td></tr></table><div class='postcolor'> 
well the auto reboot thing was ticked... so that may be it...

i unchecked it

the msblast thing was nothing to be found...

lets hop this works... i guess ill repost in a few mins if it does lol

ps, hi nad!

Moquiao · March 2004

ok here we go

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000001e (0xc0000005, 0xb77f0c6c, 0x00000000, 0x00000008). Microsoft Windows 2000 [v15.2195].
A dump was saved in: C:\WINNT\Minidump\Mini032504-06.dmp.

now... how do i open a .dmp?! notepad and wordpad dont do it :/

also i got 2 progs i dont recognise.. :/

long global aud

vsmon.exe

both in processes

any help?

and yeah its still screwing up in other words

BizZy_9mm_Messiah · March 2004

Better google that stuff man. Processes you don't recognize aren't necessarily good.

Beast · March 2004

VSMON afaik is normal o.o, Dunno about the other one.

RustySpoon · March 2004

I used to have something like that.
VSmon kept using more and more of your system memory and the computer
rebooted. VSmon is a firewall thing if im not mistaken. Check your
processed for MSLove (I had that, it kind of caused everything).
After that run <a href='http://housecall.trendmicro.com/housecall/start_corp.asp' target='_blank'>Housecall</a>. If it still does it (like mine still did) install the newest updates
and service packs. That did it for me.

On the other hand though. If it still does it ,do the following;
Download/get a firewall and burn it on a cd. Reformat.
Note: While installing windows again UNPLUG YOUR PC FROM THE NET!
Aftrer installation you might wanna see wether it still does whatever
it used to do, and if not install the firewall. Plug in your net. Update windows,
and enjoy.
My friend did the second one and said it worked perfectly. (note: Both if us had XP so I'm not guaranteeing anything)

Umbraed_Monkey · March 2004

If you reformatted, there should be no settings that remain from before besides your BIOS settings. And I doubt your family would go into that.

Moquiao · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (DaMu @ Mar 25 2004, 02:07 PM)</td></tr><tr><td id='QUOTE'> I used to have something like that.
VSmon kept using more and more of your system memory and the computer
rebooted. VSmon is a firewall thing if im not mistaken. Check your
processed for MSLove (I had that, it kind of caused everything).
After that run <a href='http://housecall.trendmicro.com/housecall/start_corp.asp' target='_blank'>Housecall</a>. If it still does it (like mine still did) install the newest updates
and service packs. That did it for me.

On the other hand though. If it still does it ,do the following;
Download/get a firewall and burn it on a cd. Reformat.
Note: While installing windows again UNPLUG YOUR PC FROM THE NET!
Aftrer installation you might wanna see wether it still does whatever
it used to do, and if not install the firewall. Plug in your net. Update windows,
and enjoy.
My friend did the second one and said it worked perfectly. (note: Both if us had XP so I'm not guaranteeing anything)  </td></tr></table><div class='postcolor'> 
lol, well im on my lunch break now... so i will try what damu said when i get home

i have zone alarm on...

and yeah i guess thats it... i cant end vsmon.exe... it wont let me

and i have no mslove thing, that is if you mean check processes.. i havent searched for mslove or anything..

i ran housecall a few times already..

im running one service pack.. which i needed for my latest ati catalyst thingy..

the only service pack i have is SP4 if thats any use

Moquiao · March 2004

oh yeah and the filedump... i found a reader...

Loading Dump File [C:\WINNT\Minidump\Mini032504-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x8046e1b8
Debug session time: Thu Mar 25 08:19:58 2004
System Uptime: not available
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Bugcheck code 00000050
Arguments fbfdff23 00000000 a000e65f 00000000

ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
eb4efa44 00000000 fbfdff23 00000000 a000e65f nt+0x4a2c9

WaitForEvent failed

Xiile · March 2004

Check if somebody jacked up the processor multiplier in the BIOS. It could be your CPU Overheating.

Moquiao · March 2004

its a 2.0 ghz amd and it is running at 1667 mhz

CommunistWithAGun · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Moquiao @ Mar 25 2004, 05:40 PM)</td></tr><tr><td id='QUOTE'> its a 2.0 ghz amd and it is running at 1667 mhz  </td></tr></table><div class='postcolor'> 
Err? Don't you mean 2000+ @ 1667? If so I might be able to help...

Decimator · March 2004

The various blaster variants can get on your computer after a reformat, even if you don't surf. Check the run part of your registry for things such as MSBlast, MSLove, MSLaugh. Better yet, go in there and tell us every program that is supposed to run at start.

BigMadSteve · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (CommunistWithAGun @ Mar 25 2004, 11:11 PM)</td></tr><tr><td id='QUOTE'> </div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Moquiao @ Mar 25 2004, 05:40 PM)</td></tr><tr><td id='QUOTE'> its a 2.0 ghz amd and it is running at 1667 mhz </td></tr></table><div class='postcolor'>
Err? Don't you mean 2000+ @ 1667? If so I might be able to help...  </td></tr></table><div class='postcolor'> 
Probably. I run an AMD Athlon 2000XP at 1.67Ghz

DragonMech · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Moquiao @ Mar 25 2004, 02:51 AM)</td></tr><tr><td id='QUOTE'>hey! well i got on holiday without getting in trouble! lol

but now im home.. and nearly my entier family has been messing with my pc.

it was LOADED with crap.</td></tr></table><div class='postcolor'>
Passwords are your friend. I have an 10-letter/number password on my computer (you <b>have</b> to protect your pr0n, you know <img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' />) that I update monthly. I reccomend you (and everyone else) do the same.

BigMadSteve · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Dragon_Mech @ Mar 25 2004, 11:39 PM)</td></tr><tr><td id='QUOTE'> </div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Moquiao @ Mar 25 2004, 02:51 AM)</td></tr><tr><td id='QUOTE'>hey! well i got on holiday without getting in trouble! lol

but now im home.. and nearly my entier family has been messing with my pc.

it was LOADED with crap.</td></tr></table><div class='postcolor'>
Passwords are your friend. I have an 10-letter/number password on my computer (you <b>have</b> to protect your pr0n, you know <img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' />) that I update monthly. I reccomend you (and everyone else) do the same.  </td></tr></table><div class='postcolor'> 
I've been using the same password over, and over for the last couple of years. It's so simple but no one has guessed it yet <img src='http://www.unknownworlds.com/forums/html//emoticons/biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif' />

V_MAN · March 2004

Can't you get round PWs but booting up in safe mode?

Moquiao · March 2004

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (CommunistWithAGun @ Mar 26 2004, 12:11 AM)</td></tr><tr><td id='QUOTE'> </div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Moquiao @ Mar 25 2004, 05:40 PM)</td></tr><tr><td id='QUOTE'> its a 2.0 ghz amd and it is running at 1667 mhz </td></tr></table><div class='postcolor'>
Err? Don't you mean 2000+ @ 1667? If so I might be able to help...  </td></tr></table><div class='postcolor'> 
well yeah <img src='http://www.unknownworlds.com/forums/html//emoticons/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' />

it could have been alot to do with sp4... cos trying to play BF:V fried me... but for my ati card to run.. it needed sp4... some **** like that lol

and yup it is 2000+

it seems to have fixed it by killing sp4

now just need some old catalysts

Moquiao · March 2004

ok

well here is where i am now.

uninstalled SP4... used the 3.1 catalyst... all SEEMED ok.. till i tried to play bf:V again...

then it all went fubar...again.

anyone got any ideas cos this is REALLY **** me off now..

GWAR · March 2004

Service pack four, you must be running windows 2000... Windows 2k was never friendly with AMD processors, back when I ran windows 2k I used to have a similar problem with auto restarting when running a 3d accelerated application.

It was suppose to have been fixed in a earlier service pack, but I still continued to get it after updating everything.

Moquiao · March 2004

so what should i do? if you suggest XP pro... then ewww but i guess i could try it

GWAR · March 2004

Make sure you eliminate the power supply as the cause of the problem first, as sometimes that will cut out if it gets too warm.

Moquiao · March 2004

bump... i still need help with this...

its still dicking me around

the latest one.. i dont think its the same..

Microsoft ® Windows Debugger Version 6.2.0013.1
Copyright © Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINNT\Minidump\Mini032704-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 2000 Kernel Version 2195 UP Free x86 compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x8046a4c0
Debug session time: Sat Mar 27 12:07:05 2004
System Uptime: not available
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Bugcheck code 0000001A
Arguments 00041284 07cc1000 0000b4ee c0502000

ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
b7765c34 00000000 00041284 07cc1000 0000b4ee nt+0x49f1a

WaitForEvent failed

Well, Im Home.. With A Fubar Pc.

Comments