1

My pc will shut off suddenly. A few days ago I had received an email with a .rar attachment of a chart of pictures of colors. My AV said it was safe so I opened and saved to my harddrive. When I opened it from there my pc immediately shut off. I have to unplug it and replug before it will start again each time it shuts off. I ran AV scan and it shows okay. I ran malwarebyte it says okay. Superantispyware says okay. I can't run any scans online, it will shut off. I ran ckdsk and it showed several things wrong and corrected them. I can't run sfc /scannow from cd or from my I386 folder, it will shut off. It will shut off if I try to run MEMTEST86 or hdd tests. I can surf okay and now open the picture file okay. I checked my cpu temp in bios the next day and it had jumped from my normal 112 -118 F. to 158 - 160 F. I took the side panel off and carefully cleaned everything and installed a new case fan (it never had one) and the temp goes up to 135F now. It is from 70F. to 80F. room temp where the pc is. I can put my finger on the cooling fins mounted on the cpu (I don't touch anything else for fear of static and I hold the case frame when I do this) and it is always cool. My PSU fan works and it is just warm at times. I changed the power connection cable. I went to update video drivers, it shuts off. Anything else to update, it shuts off. It shut off tuesday when I tried to let microsoft update. It took two tries then worked. I ran hijackthis and the log seemed okay but then again I'm not sure on this. I have minidump on but it doesn't leave a log in c:\windows. I did have a minidump in drwatson folder but when I checked this yesterday it was erased somehow. At first nothing was found in event viewer. Now in event viewer - system, it only has one warning that it has repeated the last few days--------

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/14/2009
Time: 10:13:04 PM
User: N/A
Computer: EWA
Description:
The HDD & SSD access service service failed to start due to the following error:
The system cannot find the file specified.

or it will say it 'cannot find the path specified'.
-------------------------------------------
It could be just coincidence the pc shut off when I clicked on the picture file. I don't know. I'm not any smart with the pc and I know it is old but it is all we have for now. This pc is not used for any gaming, just email, internet and simple stuff. I've googled a lot but it is mixed information I seem to find. I don't know if it is hardware, software, infected, little green aliens or just weird. Any help will be greatly appreciated from me before I lose my sanity.

Size: 74.53 GB
Operating System: Microsoft Windows XP home edition, (v5.1, build 3600) SP3
System Manufacturer: VIA Technologes, Inc.
Motherboard Model: KT400A-8235
Motherboard Vendor: Biostar
BIOS Model: Phoenix - AwardBIOS v6.00PG
Processor: AMD Sempron(tm) 2600+, MMX, 3DNow, ~1.8GHz
Memory: 256MB RAM
Info On Video Card- Model: ATI 9550 AGP8X 128MB TV-OUT DVI
GPU Code Name RV350 (AGP 8x 1002 / 4153, Rev 00)
GPU Clock 250 MHz (original: 250 MHz)
Memory Clock 196 MHz (original: 200 MHz)
Power Supply Unit: (It's what I read on the side)?
FEEL Mode Com, switching power supply, model: LC.B3DDATX, passive PFC, total output: 300w, 60hz-50hz (I'm 50hz)
-------------
Sensor Properties When Posted:
Temperatures:
Motherboard- 55 °C (131 °F)
CPU- 57 °C (135 °F)
Aux- 30 °C (86 °F)
WDC WD800BB-22JHA0- 38 °C (100 °F)
Cooling Fans: CPU- 3750 RPM
Voltage Values: CPU Core- 1.54 V
+2.5: V 2.56 V
+3.3: V 3.18 V
+5 V: 5.00 V
+12 V: 11.52 V
+5 V Standby: 4.84 V
VBAT Battery: 3.17 V
-------------
One new case fan,
Monitor: one SyncMaster 720n, Samsung
Display Adapters: Radeon 9550 (RV350), Radeon 9550 Secondary (not updated)
Browsers: IE8, Google Chrome, Firefox- used the most
DirectX 9.oc
C-Media AC97 Audio Device
Anti-Virus: Avast home edition
Firewall: Online Armor
All Microsoft updates,
Email: Thunderbird
printer, scanner

Sorry if I've over posted info.

Votes + Comments
Good explanation of the problem :)
2
Contributors
5
Replies
6
Views
8 Years
Discussion Span
Last Post by eyecee
0

Sorry if I've over posted info.

It makes a refreshing change from "My pc wont work". :)

Could you post both your Mbam and HJT log's for us to have a look at.

0

Should I posts the logs in this thread or in the virus, spyware forum?
And thanks for the reply. I was afraid I had over done the info.

0

Post them here. If there is any serious malware problems, a mod can always move the thread.

0

Malwarebytes' Anti-Malware 1.39
Database version: 2421
Windows 5.1.2600 Service Pack 3

7/16/2009 3:49:58 PM
mbam-log-2009-07-16 (15-49-58).txt

Scan type: Full Scan (C:\|)
Objects scanned: 133013
Time elapsed: 37 minute(s), 38 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
---------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:57:07 PM, on 7/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Tall Emu\Online Armor\OAcat.exe
C:\Program Files\Tall Emu\Online Armor\oasrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Tall Emu\Online Armor\oaui.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\tinySpell\tinyspell.exe
C:\Program Files\Tall Emu\Online Armor\OAhlp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Hotspot Shield\bin\openvpntray.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [tinySpell] C:\Program Files\tinySpell\tinyspell.exe
O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe
O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll
O9 - Extra 'Tools' menuitem: &KeyScrambler... - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BCGWXXFF - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BIGBOB~1\LOCALS~1\Temp\BCGWXXFF.exe
O23 - Service: Google Update Service (gupdate1c9f821110f5760) (gupdate1c9f821110f5760) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\OAcat.exe
O23 - Service: OLAWCMOP - Sysinternals - www.sysinternals.com - C:\DOCUME~1\BIGBOB~1\LOCALS~1\Temp\OLAWCMOP.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe

--
End of file - 5915 bytes

I hope MBAM means Malwarebytes' Anti-Malware.

This question has already been answered. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.