Computer problem - Hijackthis report | Pro help needed

[speedboy]

Hey,

so the problem is this, I got a bluescreen and my computer restarted, and then couldnt start. I thought its the HDD but I gave it to an Expert and after some days he said he didnt find any error on the HDD. So right now, Im checking all my hardware and I made a HijackThis report, because maybe someone can see an error in there. I hope theres someone here who knows this shit

There:

Code: [Select]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:56:26, on 03.11.2011
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\SOUNDMAN.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Speed\Desktop\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\RpcAgentSrv.exe

--
End of file - 2995 bytes


I have to add that I just re-installed Win7 and deleted all cotent on my HDD. But I just wanna be sure.

[Ted]

What information did the blue screen provide? You say it couldn't start did the bluescreens continue in loop? What did you recently change software/hardware wise on your computer? Recent changes especially if dramatic can cause bluescreens as can faulty hardware.

Event viewer is a good tool of Windows 7 to use to find information regarding errors. Another tip would be to go into Advanced system settings, look for Startup and Recovery click the settings button, then under 'System failure' untick Automatically restart. In the event of a bluescreen you will be able to read the actual screen it'self you can then restart at your own choice.

The log you posted shows nothing that could be of any issue.

[speedboy]

The Bluescreen said normal things like, that there was a problem and if this is the first time seeing a BS i should restart and continue. No it made a BS, restartet and then sent no signal to the Display and kept restarting after like 2 seconds... thanks. At the moment everything works. I had the same prob with my old HDD and I bought a new one. Now I got the same prob so I think its some of my other hardware.

[Ted]

For example the information under 'Technical information:' or 'The problem seems to be caused by the following file' are what should be noted then looked into. Example of what i mean below.

http://upload.wikimedia.org/wikipedia/commons/0/0e/Windows_XP_Blue_Screen_of_Death_(PAGE_FAULT_IN_NONPAGED_AREA).svg

[speedboy]

Well then idk i didnt have time to fully read it.
Post Merge: November 04, 2011, 02:02:44 pmRight now, my computer restarted again and kept restarting in like 2 second steps. When I turned it off, and after a minute on again, it worked. So now its working normal again. I just dont know what causes this shit :/


Post Merge: November 04, 2011, 02:02:44 pmRight now, my computer restarted again and kept restarting in like 2 second steps. When I turned it off, and after a minute on again, it worked. So now its working normal again. I just dont know what causes this shit :/

I checked the temperature of my Computer with Core Temp and it says:

                         LOW    HIGH     LOAD
Core #0: 39C      37C     43C       0%
Core #1: 35C      33C     38C       0%


So everything is okay, imo... right?
I just dont know what to do.

[Ted]

Yes, but we won't know what is causing the bluescreens unless you provide us with the information they contain, they could be holding vital information here without knowing that it could be pretty much anything causing them, such as faulty ram, corrupt graphics drivers, faulty graphics card list goes on.

[speedboy]

I turned the automatic restart off and today there wasnt any blusecreen. If there is another, I will post what it says.

[Ted]

Event viewer will log the information that the bluescreen provides as i mentioned above just look for the time that it occurred in the event viewer. Much better then waiting for the next.

Can you tell us what you are doing when these bluescreens and restarts happen?

[speedboy]

Where do I find event viewer?
Well nothing special. E.g. at the last restart I was watching a video on youtube. at the restart before, I was on argonath forum...
Post Merge: November 05, 2011, 12:26:25 amOh and btw i'm using Win7, just to help you, telling me how to find the event viewer

[Ted]

You can just type it in the Start Menu and it will appear once it's opened click the 'Windows Logs' tab then 'System' look for information or warnings around the time the restart happened it may lead to a clue.

For now I can only speculate it being an issue with Flash Player as you stated you were viewing videos on YouTube it could be something else too.

[speedboy]

For now I can only speculate it being an issue with Flash Player as you stated you were viewing videos on YouTube it could be something else too.

Now I had another restart and I was only googleing and installing a program. Gonna check the Event Viewer now and write it here.

EDIT: Now I got a Bluescreen which says:

A problem has been detected and Windows has been shut down to prevent damage to your computer.

IRQL_NOT_LESS_OR_EQUAL

If this is the first time you've seen this stop erros screen bla bla bla...
#
Technical Information:

*** STOP: 0x0000000A (0x00000000, 0x00000002, 0x00000001, 0x82886AA4)

Gonna restart the computer and check event viewer now.

EDIT: Usually when my PC starts, the DVD drive is making some scratching, then theres "peep peep" and it starts... Now, when I start it makes the scratching and only one "peep" and it freezes at the first picture that says:

AMIBIOS (C) 2005 American Megatrends, Inc.
Release 08/31/2007
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+
Speed: 2.40 GHz     Count: 2






(C)American Megatrends, Inc.
*some long number*

usually when I start my computer I see this picture for only like a second now it freezes there.
that really sucks coz now I cant even start my PC at all.

Another EDIT: Now I turned it off and waited like 5 min. Then turned it on again and now it works -.-
Post Merge: November 05, 2011, 01:33:11 pmOk heres what I've found in Event Viewer (it was on german and I had to translate so there might be some mistakes):

Often there was:

Code: [Select]

Log Name: System
Source: NetBT
Date: 11/05/2011 12:58:21
Event ID: 4321
Task Category: None
Level: Error
Keywords: Classic
User: Not applicable
Computer: PC Speed
Description:
The name "SPEED-PC: 20" could not be registered on the Interface with IP address 192.168.2.101. The computer with IP address 192.168.2.106 did not allow this computer to use this name.
Event Xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="NetBT" />
     <EventID Qualifiers="49152"> 4321 </ EventID>
     <Level> 2 </ Level>
     <task> 0 </ Task>
     <Keywords> 0x80000000000000 </ Keywords>
     <TimeCreated SystemTime="2011-11-05T11:58:21.338867100Z" />
     <EventRecordID> 3521 </ EventRecordID>
     <Channel> System </ Channel>
     <Computer> Speed​​-PC </ Computer>
     <Security />
   </ System>
   <EventData>
     <Data>
     </ Data>
     <Data> PC SPEED: 20 </ Data>
     <Data> 192.168.2.101 </ Data>
     <Data> 192.168.2.106 </ Data>
     <Binary> 000000000400320000000000E11000C001010000010000C001000000000000000000000000000000 </ Binary>
   </ EventData>
</ Event>
And there was:

Code: [Select]

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/05/2011 13:14:57
Event ID: 6
Task Category: (6)
Level: Error
Keywords:
User: SYSTEM
Computer: PC Speed
Description:
Some power management features are disabled in the performance status of the processor due to a known firmware problem. Contact the computer manufacturer for updated firmware.
Event Xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
     <EventID> 6 </ EventID>
     <Version> 0 </ Version>
     <Level> 2 </ Level>
     <task> 6 </ Task>
     <Opcode> 0 </ Opcode>
     <Keywords> 0x8000000000000000 </ Keywords>
     <TimeCreated SystemTime="2011-11-05T12:14:57.796875000Z" />
     <EventRecordID> 3569 </ EventRecordID>
     <Correlation />
     <Execution ProcessID="4" ThreadID="44" />
     <Channel> System </ Channel>
     <Computer> Speed​​-PC </ Computer>
     <Security UserID="S-1-5-18" />
   </ System>
   <EventData>
   </ EventData>
</ Event>
And here an error which says something about the computer restart:

Code: [Select]

Log Name: System
Source: Microsoft-Windows-WER-error reporting system
Date: 11/05/2011 13:15:18
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: Not applicable
Computer: PC Speed
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x00000000, 0x00000002, 0x00000001, 0x82886aa4). A dump was saved in: C: \ Windows \ MEMORY.DMP. Report ID: 110511-28453-01.
Event Xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
     <EventID Qualifiers="16384"> 1001 </ EventID>
     <Version> 0 </ Version>
     <Level> 2 </ Level>
     <task> 0 </ Task>
     <Opcode> 0 </ Opcode>
     <Keywords> 0x80000000000000 </ Keywords>
     <TimeCreated SystemTime="2011-11-05T12:15:18.000000000Z" />
     <EventRecordID> 3581 </ EventRecordID>
     <Correlation />
     <Execution ProcessID="0" ThreadID="0" />
     <Channel> System </ Channel>
     <Computer> Speed​​-PC </ Computer>
     <Security />
   </ System>
   <EventData>
     <Data Name="param1"> 0x0000000a (0x00000000, 0x00000002, 0x00000001, 0x82886aa4) </ Data>
     <Data Name="param2"> C: \ Windows \ MEMORY.DMP </ Data>
     <Data Name="param3"> 110511-28453-01 </ Data>
   </ EventData>
</ Event>
And something with servers:

Code: [Select]

Log Name: System
Source: Server
Date: 11/05/2011 13:15:28
Event ID: 2505
Task Category: None
Level: Error
Keywords: Classic
User: Not applicable
Computer: PC Speed
Description:
Because of a duplicate network name was to the transport \ Device \ NetBT_Tcpip_ {99ACD92E-472f-4C7D-81BE-4002D44AFC68} from the server service will not be bound. The server could not be started.
Event Xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="Server" />
     <EventID Qualifiers="49152"> 2505 </ EventID>
     <Level> 2 </ Level>
     <task> 0 </ Task>
     <Keywords> 0x80000000000000 </ Keywords>
     <TimeCreated SystemTime="2011-11-05T12:15:28.000000000Z" />
     <EventRecordID> 3623 </ EventRecordID>
     <Channel> System </ Channel>
     <Computer> Speed​​-PC </ Computer>
     <Security />
   </ System>
   <EventData>
     <Data> \ Device \ NetBT_Tcpip_ {99ACD92E-472f-4C7D-81BE-4002D44AFC68} </ Data>
     <Binary> 34000000 </ Binary>
   </ EventData>
</ Event>
And this one was often too:

Code: [Select]

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 11/05/2011 12:57:53
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: PC Speed
Description:
The system has rebooted without cleanly shutting down it was. This error can occur if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
     <EventID> 41 </ EventID>
     <Version> 2 </ version>
     <Level> 1 </ Level>
     <task> 63 </ Task>
     <Opcode> 0 </ Opcode>
     <Keywords> 0x8000000000000002 </ Keywords>
     <TimeCreated SystemTime="2011-11-05T11:57:53.609375000Z" />
     <EventRecordID> 3464 </ EventRecordID>
     <Correlation />
     <Execution ProcessID="4" ThreadID="8" />
     <Channel> System </ Channel>
     <Computer> Speed​​-PC </ Computer>
     <Security UserID="S-1-5-18" />
   </ System>
   <EventData>
     <Data Name="BugcheckCode"> 0 </ Data>
     <Data Name="BugcheckParameter1"> 0x0 </ Data>
     <Data Name="BugcheckParameter2"> 0x0 </ Data>
     <Data Name="BugcheckParameter3"> 0x0 </ Data>
     <Data Name="BugcheckParameter4"> 0x0 </ Data>
     <Data Name="SleepInProgress"> false </ Data>
     <Data Name="PowerButtonTimestamp"> 0 </ Data>
   </ EventData>
</ Event>
And this:

Code: [Select]

Log Name: System
Source: EventLog
Date: 11/05/2011 12:58:09
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: Not applicable
Computer: PC Speed
Description:
The system was previously on 05 11th 2011 at 12:53:33 shut down unexpectedly.
Event Xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="EventLog" />
     <EventID Qualifiers="32768"> 6008 </ EventID>
     <Level> 2 </ Level>
     <task> 0 </ Task>
     <Keywords> 0x80000000000000 </ Keywords>
     <TimeCreated SystemTime="2011-11-05T11:58:09.000000000Z" />
     <EventRecordID> 3459 </ EventRecordID>
     <Channel> System </ Channel>
     <Computer> Speed​​-PC </ Computer>
     <Security />
   </ System>
   <EventData>
     <Data> 12:53:33 </ Data>
     <Data> 05th 11th 2011 </ Data>
     <Data>
     </ Data>
     <Data>
     </ Data>
     <Data> 801 </ Data>
     <Data>
     </ Data>
     <Data>
     </ Data>
   
   </ EventData>
</ Event>
I couldnt find a cause... maybe you can   :gd:

[Ted]

Ok, It could be a ram issue in which case you would need something like this http://www.memtest.org/#downiso to check it. You can also test ram one by one yourself but that would mean going into your tower and removing ram, as it could potentially be only one faulty ram stick. Going all the way back to when you were watching that YouTube video your graphics drivers could be a culprit in which case try updating or even downgrading them.

Are those beeps that your motherboard gives out the usual has it happened since you first got the computer? I nearly forgotten to ask, what brand/model is your motherboard?

[Julio.]

Yup, one short beep suggests that it's RAM, may also be that it's just worked loose, but yea, follow Ted's instructions is the best plan.

[speedboy]

The two beeps are there since i got the computer. And, I just installed the newest driver for my graphics card, downloaded from the official nvidia website. I actually don't think it's the graphic card (to respond on your youtube suggest), because it doesn't only happen when i'm doing something what uses the graphics card much. And I can tell ya the model of my motherboard later in like 10-11 hours, because it's 1:00 AM here so i gotta sleep now (online with mobile phone)... gonna DL memtest tomorrow, and tell ya the model of my motherboard tomorrow. if memtest doesn't bring us forward, i gonna check the sticks one-by-one. Can I just put one out and start the PC with one stick? Coz I got 2, 1GB sticks = 2Gb in total. Would the PC actually work with only 1GB ? I know even 2Gb is not much so...
Post Merge: November 06, 2011, 12:44:25 am
With 'tomorrow' I mean later today ;D as I said in like 10-11 hours.

[Ted]

Yes of course that would be perfectly fine you only a slight decrease in performance.