TechSpot

Black screen and bombs out then I have to reset and log on

By Bonni
Nov 15, 2010
Post New Reply
  1. My desktop constantly bombs out, it goes to blackscreen, and then I have to reboot and log on.

    I think that perhaps certain programs are outdated, but I do not know how to find the latest, as I am afaid of viruses. I have AVG.
     
  2. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    If you are afraid you might be infected please see our Virus and Malware Removal forum and read the UPDTAED 8 Step sticky. Follow the instructions and post on that forum with the required logs attached.
     
  3. Bonni

    Bonni TS Rookie Topic Starter

    DDS LOG

    1/9/2010 8:30:37 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    11/16/2010 12:25:40 PM, error: atapi [9] - The device, \Device\Ide\IdePort0, did not respond within the timeout period.
    11/16/2010 12:22:04 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde
    11/16/2010 12:00:08 PM, error: VolSnap [20] - The shadow copy of volume C: was aborted because of a failed free space computation.
    11/16/2010 11:54:01 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Volume Shadow Copy service to connect.
    11/16/2010 11:54:01 AM, error: Service Control Manager [7000] - The Volume Shadow Copy service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    11/16/2010 11:53:41 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service VSS with arguments "" in order to run the server: {E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
    11/16/2010 11:34:17 AM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. .
    11/16/2010 11:34:17 AM, error: SideBySide [59] - Generate Activation Context failed for C:\DOCUME~1\DERRIC~1.DER\LOCALS~1\Temp\RarSFX0\redist.dll. Reference error message: The operation completed successfully. .
    11/16/2010 11:34:17 AM, error: SideBySide [32] - Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system.
    11/10/2010 8:22:30 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the lxdnCATSCustConnectService service to connect.
    11/10/2010 8:22:30 AM, error: Service Control Manager [7000] - The lxdnCATSCustConnectService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

    MALWARESBYTES ANTI-MALIWARE LOG

    Malwarebytes' Anti-Malware 1.46


    Database version: 5124

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 6.0.2900.5512

    2010/11/16 12:18:19 PM
    mbam-log-2010-11-16 (12-18-19).txt

    Scan type: Quick scan
    Objects scanned: 181003
    Time elapsed: 12 minute(s), 57 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 1
    Registry Data Items Infected: 2
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\forceclassiccontrolpanel (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Folders Infected:
    (No malicious items detected)

    DDS

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-11-10.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 8/5/2010 9:29:52 PM
    System Uptime: 11/16/2010 12:19:57 PM (2 hours ago)

    Motherboard: Intel Corporation | | D865PERL
    Processor: Intel(R) Pentium(R) 4 CPU 3.20GHz | J2E1 | 3191/200mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 37 GiB total, 5.073 GiB free.
    D: is CDROM ()
    E: is CDROM ()
    F: is CDROM ()

    ==== Disabled Device Manager Items =============

    Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
    Description: Ethernet Controller
    Device ID: PCI\VEN_8086&DEV_1050&SUBSYS_30208086&REV_01\4&2E98101C&0&40F0
    Manufacturer:
    Name: Ethernet Controller
    PNP Device ID: PCI\VEN_8086&DEV_1050&SUBSYS_30208086&REV_01\4&2E98101C&0&40F0
    Service:

    Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
    Description: Multimedia Audio Controller
    Device ID: PCI\VEN_8086&DEV_24D5&SUBSYS_A0008086&REV_02\3&267A616A&0&FD
    Manufacturer:
    Name: Multimedia Audio Controller
    PNP Device ID: PCI\VEN_8086&DEV_24D5&SUBSYS_A0008086&REV_02\3&267A616A&0&FD
    Service:

    ==== System Restore Points ===================

    RP15: 8/19/2010 5:36:46 AM - System Checkpoint
    RP16: 8/19/2010 6:35:37 PM - Installed Adobe Reader 8.1.2
    RP17: 8/20/2010 8:44:19 PM - System Checkpoint
    RP18: 8/21/2010 8:48:43 PM - System Checkpoint
    RP19: 8/23/2010 4:21:21 PM - Installed Adobe Reader 7.0.8
    RP20: 8/23/2010 4:25:53 PM - Installed Microsoft Office Enterprise 2007
    RP21: 8/23/2010 4:40:25 PM - Printer Driver Send To Microsoft OneNote Driver Installed
    RP22: 8/23/2010 4:41:00 PM - Printer Driver Microsoft Office Document Image Writer Installed
    RP23: 8/23/2010 4:41:59 PM - Installed Adobe Photoshop CS2
    RP24: 8/25/2010 8:32:19 PM - System Checkpoint
    RP25: 8/25/2010 9:12:26 PM - Installed DirectX
    RP26: 8/25/2010 9:13:57 PM - Installed Nero 7 Essentials
    RP27: 8/28/2010 5:05:29 PM - System Checkpoint
    RP28: 8/29/2010 7:03:20 PM - System Checkpoint
    RP29: 9/6/2010 7:20:07 PM - System Checkpoint
    RP30: 9/8/2010 6:29:22 PM - System Checkpoint
    RP31: 9/13/2010 9:51:42 PM - System Checkpoint
    RP32: 9/15/2010 7:25:43 PM - System Checkpoint
    RP33: 9/17/2010 1:23:14 PM - System Checkpoint
    RP34: 9/24/2010 10:18:28 PM - System Checkpoint
    RP35: 10/2/2010 7:55:39 PM - System Checkpoint
    RP36: 10/5/2010 8:08:56 AM - System Checkpoint
    RP37: 10/6/2010 6:53:33 PM - System Checkpoint
    RP38: 10/7/2010 7:54:55 PM - System Checkpoint
    RP39: 10/11/2010 9:02:31 PM - System Checkpoint
    RP40: 10/14/2010 7:42:47 PM - System Checkpoint
    RP41: 10/15/2010 8:07:41 PM - System Checkpoint
    RP42: 10/16/2010 10:08:53 PM - System Checkpoint
    RP43: 10/19/2010 6:02:26 AM - System Checkpoint
    RP44: 10/20/2010 8:20:48 PM - System Checkpoint
    RP45: 10/25/2010 3:51:38 PM - System Checkpoint
    RP46: 10/27/2010 8:34:15 AM - System Checkpoint
    RP47: 10/28/2010 5:26:27 PM - System Checkpoint
    RP48: 10/30/2010 7:12:11 AM - System Checkpoint
    RP49: 10/31/2010 6:05:34 PM - System Checkpoint
    RP50: 11/3/2010 8:28:41 PM - System Checkpoint
    RP51: 11/5/2010 12:12:12 PM - System Checkpoint
    RP52: 11/7/2010 8:52:18 PM - System Checkpoint
    RP53: 11/10/2010 4:42:26 PM - System Checkpoint
    RP54: 11/15/2010 10:43:28 AM - Software Distribution Service 3.0
    RP55: 11/15/2010 3:30:48 PM - Software Distribution Service 3.0
    RP56: 11/15/2010 5:51:11 PM - Software Distribution Service 3.0
    RP57: 11/15/2010 8:07:52 PM - Software Distribution Service 3.0
    RP58: 11/16/2010 10:48:49 AM - Printer Driver Microsoft XPS Document Writer Installed
    RP59: 11/16/2010 11:36:25 AM - Avira AntiVir Personal - 2010/11/16 11:34

    ==== Installed Programs ======================


    ABBYY FineReader 6.0 Sprint
    Adobe Flash Player 10 ActiveX
    Adobe Photoshop CS2
    Adobe Reader 7.0.8
    Adobe Reader 8.1.2
    Apple Mobile Device Support
    Apple Software Update
    Avira AntiVir Personal - Free Antivirus
    Bonjour
    DAEMON Tools Toolbar
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB954550-v5)
    iBurst Dashboard V2
    iBurst Terminal
    iTunes
    K-Lite Codec Pack 2.80 Full
    Lexmark 2400 Series
    Lexmark 2600 Series
    Lexmark Fax Solutions
    Lexmark Toolbar
    Lexmark Tools for Office
    LightScribe System Software 1.10.27.1
    Macromedia Shockwave Player
    Malwarebytes' Anti-Malware
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft Software Update for Web Folders (English) 12
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    mIRC
    Mortal Kombat 4
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    Nero 7 Essentials
    neroxml
    Pidgin
    QuickTime
    QuickTime Alternative 1.70
    Real Alternative 1.49
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982665)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB973815)
    WebFldrs XP
    Windows Media Format Runtime

    ==== Event Viewer Messages From Past Week ========

    11/9/2010 8:30:37 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    11/16/2010 12:25:40 PM, error: atapi [9] - The device, \Device\Ide\IdePort0, did not respond within the timeout period.
    11/16/2010 12:22:04 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde
    11/16/2010 12:00:08 PM, error: VolSnap [20] - The shadow copy of volume C: was aborted because of a failed free space computation.
    11/16/2010 11:54:01 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Volume Shadow Copy service to connect.
    11/16/2010 11:54:01 AM, error: Service Control Manager [7000] - The Volume Shadow Copy service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    11/16/2010 11:53:41 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service VSS with arguments "" in order to run the server: {E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
    11/16/2010 11:34:17 AM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. .
    11/16/2010 11:34:17 AM, error: SideBySide [59] - Generate Activation Context failed for C:\DOCUME~1\DERRIC~1.DER\LOCALS~1\Temp\RarSFX0\redist.dll. Reference error message: The operation completed successfully. .
    11/16/2010 11:34:17 AM, error: SideBySide [32] - Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system.
    11/10/2010 8:22:30 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the lxdnCATSCustConnectService service to connect.
    11/10/2010 8:22:30 AM, error: Service Control Manager [7000] - The lxdnCATSCustConnectService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

    ==== End Of File ===========================


    Files Infected:
    (No malicious items detected)
     
  4. Bonni

    Bonni TS Rookie Topic Starter

    Thank you Julio, the computer already has not bombed in about 6 hours.
    : )
     
  5. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    What was Julio's advice?
     
  6. Bonni

    Bonni TS Rookie Topic Starter

    Black screen and bombing out

    Julio's instructions were to follow - Update 8-step Viruses/Malare prelimanary removal instructions.. It worked, and then the computer crashed and I restored , and now its still bombing out.. going to black screen and switching off completely.
    I have updated all the packages, but since the crash, I cannot load any anti-virus, it bombs out halfway through Avira, also all the other programs were there when I restored, but not Avira.
     
  7. Bonni

    Bonni TS Rookie Topic Starter

    I reloaded Avira again last night and so far the computer has not bombed, its just very slow, how can I speed it up abit? thanx!
     
  8. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    What is slow, Avira or the system as a whole?
     
  9. Bonni

    Bonni TS Rookie Topic Starter

    Black screen and bombs out then I have to restart

    The whole system is slow, it could be the memory. I have more memory to install, but am not to sure how to do that either, sorry i am IT challenged.:haha:
     
  10. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    If you can give us as much hardware information as you can especially how much memory you are now running and what you hope to install.

    With the slowness of your system it could mean you are still infected.
     
  11. Bonni

    Bonni TS Rookie Topic Starter

    Definately stil infected, as Avira constantly picks up a Trojan..
     
  12. Bonni

    Bonni TS Rookie Topic Starter

    TR/Dropper.Gen Trojan

    Hi, this is the name of the viruses, and I cant seem to get rid of it.
     
  13. Bonni

    Bonni TS Rookie Topic Starter

    AppName Iexplore.exe AppVer: 8.0. 6001.18702 ModName acroiehelper.dll
    ModVer: 9.4.0.195 Offset: 00001387

    What on earth does this mean?
    C:\DOCUME~1\DERRIC~1.DER\LOCALS~1\Temp\6cc2_appcompat.txt
     
  14. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Your slowness is caused by infections. Go back to my first post and follow those directions.

    After you read the Updated 8 Step sticky follow it step by step -- don't skip any steps. Then on that forum (not here) post with the required logs. You'll get excellent help.
     
  15. Bonni

    Bonni TS Rookie Topic Starter

    Hi, All the steps were followed and the system still bombs, the logs were posted on that post, please refer.
     
  16. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Did you post on the Virus and Malware Removal forum with the required logs attached? The logs are to be attached using the Manage Attacments button.
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...