This is what I got after the computer has been rebooted:
Error signature:
BCCode : 100000ea BCP1 : 88D795A8 BCP2 : 884BD610 BCP3 : BACDBCBC
BCP4 : 00000001 OSVer : 5_1_2600 SP : 2_0 Product : 256_1
which led me to:
http://wer.microsoft.com/Responses/R...2-8f254420ddb3
http://wer.microsoft.com/Responses/R...8-451433725c68
so basically what's bugging me is the graphic card drivers.
(nv4_disp.dll ******* up and making computer rebooting)
I tried updating the drivers and removing them and installing again.
I tried the advice Microsoft support FAQ gave with little success.
Spec:
CPU: AMD Athlon 64 x2 Dual core processor 2ghz
Motherboard: NVidia nForce 3 250
Graphic Card: NVidia GeForce 6600LE 256mb
2 gb ram
Do I need more info?
DSS log
Deckard's System Scanner v20070426.43
Run by Zell_ on 2007-05-03 at 19:02:11
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 5 Restore Point(s) --
20: 2007-05-03 17:02:14 UTC - RP221 - Deckard's System Scanner Restore Point
19: 2007-05-03 15:58:06 UTC - RP220 - Installed Ad-Aware SE Personal
18: 2007-05-02 19:58:27 UTC - RP219 - Installed Dual-Core Optimizer
17: 2007-05-02 19:09:09 UTC - RP218 - Installation av osignerad drivrutin
16: 2007-05-02 14:34:06 UTC - RP217 - Systemkontrollpunkt
-- First Restore Point --
1: 2007-04-17 16:12:03 UTC - RP202 - Systemkontrollpunkt
Performed disk cleanup.
-- HijackThis (run as Zell_.exe) -----------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 19:04:32, on 2007-05-03
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\nvraidservice.exe
C:\Program\Java\jre1.6.0_01\bin\jusched.exe
C:\Program\DAEMON Tools\daemon.exe
C:\Program\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\PROGRAM\FRAPS\FRAPS.EXE
C:\Program\SEC\Natural Color\NaturalColorLoad.exe
C:\Program\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\wbem\unsecapp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program\SensorsViewPro31\sviewpro.exe
C:\Program\Winamp\winamp.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program\Internet Explorer\IEXPLORE.EXE
C:\Program\Internet Explorer\iexplore.exe
G:\Programfiler\dss.exe
C:\Program\HIJACK~1\Zell_.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.jalba.se/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\System32\nvraidservice.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [nod32kui] "C:\Program\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NodLogin] C:\Program\Eset\nodlogin.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Fraps] C:\PROGRAM\FRAPS\FRAPS.EXE
O4 - Startup: Adobe Gamma.lnk = C:\Program\Delade filer\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: NaturalColorLoad.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/microsof...?1152631578858
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) -
http://www.blizzard.com/support/includes/cabs/si.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsof...?1152631568530
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) -
http://gamedownload.ijjimax.com/game...Plugin9USA.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program\Delade filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatisk LiveUpdate-schemaläggare - Unknown owner - C:\Program\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R2 sensorsview - c:\windows\system32\drivers\sensorsview.sys <Not Verified; Windows (R) 2000 DDK provider; Windows (R) 2000 DDK driver>
R2 SVKP - c:\windows\system32\svkp.sys <Not Verified; AntiCracking; SVKP driver for NT>
S3 AmdTools (AMD Special Tools Driver) - c:\windows\system32\drivers\amdtools.sys (file missing)
S3 gdrv - c:\windows\gdrv.sys
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
S2 Automatisk LiveUpdate-schemaläggare - "c:\program\symantec\liveupdate\aluschedulersvc.exe" (file missing)
-- Files created between 2007-04-03 and 2007-05-03 -----------------------------
2007-05-03 18:22:58 0 d-------- C:\Documents and Settings\Zell_\Application Data\Lavasoft
2007-05-03 18:04:43 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-05-03 18:04:36 0 d-------- C:\WINDOWS\LastGood
2007-05-03 17:58:06 0 d-------- C:\Program\Lavasoft
2007-05-03 17:49:22 0 d-------- C:\Program\SensorsViewPro31
2007-05-03 16:15:14 0 d--hs---- C:\FOUND.013
2007-05-02 22:26:28 0 d-------- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-05-02 21:58:27 0 d-------- C:\Program\AMD
2007-05-02 21:58:10 0 d-------- C:\WINDOWS\Downloaded Installations
2007-05-02 21:09:58 0 d-------- C:\WINDOWS\nview
2007-05-01 16:11:26 1324 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-05-01 16:11:20 1100 --a------ C:\WINDOWS\system32\d3d8caps.dat
2007-05-01 15:04:00 0 d--hs---- C:\FOUND.012
2007-04-28 12:33:34 0 d--hs---- C:\FOUND.011
2007-04-28 12:30:42 0 d--hs---- C:\FOUND.010
2007-04-28 12:22:56 0 d--hs---- C:\FOUND.009
2007-04-24 21:11:29 0 d-------- C:\Program\Fraps
2007-04-17 18:12:01 3932160 --a------ C:\Documents and Settings\Zell_\ntuser.dat
2007-04-16 19:21:38 0 d--hs---- C:\FOUND.008
2007-04-16 18:59:56 0 d--hs---- C:\FOUND.007
2007-04-09 14:59:56 0 d--hs---- C:\FOUND.006
2007-04-07 01:29:29 0 d-------- C:\Program\directx
-- Find3M Report ---------------------------------------------------------------
2007-03-27 18:45:42 0 d-------- C:\Documents and Settings\Zell_\Application Data\Opera
-- Registry Dump ---------------------------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program\Java\jre1.6.0_01\bin\ssv.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SoundMan"="SOUNDMAN.EXE"
"NVRaidService"="C:\\WINDOWS\\System32\\nvraidservice.exe"
"SunJavaUpdateSched"="\"C:\\Program\\Java\\jre1.6.0_01\\bin\\jusched.exe\""
"YeppStudioAgent"="C:\\Program\\Samsung\\SamsungMediaStudio4.1\\SamsungMediaStudioAgent.exe"
"DAEMON Tools"="\"C:\\Program\\DAEMON Tools\\daemon.exe\" -lang 1033"
"nod32kui"="\"C:\\Program\\Eset\\nod32kui.exe\" /WAITSERVICE"
"NodLogin"="C:\\Program\\Eset\\nodlogin.exe"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"amd_dc_opt"="C:\\Program\\AMD\\Dual-Core Optimizer\\amd_dc_opt.exe"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MsnMsgr"="\"C:\\Program\\MSN Messenger\\MsnMsgr.Exe\" /background"
"Steam"=""
"Fraps"="C:\\PROGRAM\\FRAPS\\FRAPS.EXE"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
Usnsvc REG_MULTI_SZ usnsvc\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5fcb8292-18cf-11db-a0b5-806d6172696f}]
Shell\AutoRun\command F:\autoplay.exe
*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_SENSORSVIEW
-- End of Deckard's System Scanner: finished at 2007-05-03 at 19:04:58 ---------
Here's a picture of some temperatures
If it's any help (Taken while computer was idle
and under heavy load)
And last the panda log:
For better visual:
http://www.megaupload.com/se/?d=6UQW8MYN
Incident
| Status
| Location
Spyware:Cookie/Xiti
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@xiti[1].txt
Spyware:Cookie/Yadro
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@yadro[2].txt
Spyware:Cookie/Cgi-bin
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@cgi-bin[1].txt
Spyware:Cookie/Com.com
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@com[1].txt
Spyware:Cookie/Xiti
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@xiti[2].txt
Spyware:Cookie/DriveCleaner
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@drivecleaner[2].txt
Spyware:Cookie/DriveCleaner
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@www.drivecleaner[1].txt
Spyware:Cookie/Azjmp
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@azjmp[1].txt
Spyware:Cookie/Toplist
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@toplist[1].txt
Spyware:Cookie/Hbmediapro
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@adopt.hbmediapro[2].txt
Spyware:Cookie/Go
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@go[2].txt
Spyware:Cookie/BurstNet
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@burstnet[1].txt
Spyware:Cookie/Com.com
| Not disinfected
| C:\Documents and Settings\Zell_\Cookies\zell_@com[2].txt
Potentially unwanted tool:Application/MotherboardMonitor.A
| Not disinfected
| C:\Program\mIRC\Moo.dll
----
I would like to thank you in advance for any help, I just want to be able to play games