Computer Freezes

[christopher2527]

Hey my computer freezes off and on...I was on for about 5 hours last night then it froze and today I was on it for about 20-30 minutes and it froze please help...here is my Hijackthis log
and I did change it to Hijackthis1991

 

[dahli]

Hello,

Please Download NoLop to your desktop from one of the links below...
http://www.spywareedge.net/nolop/NoLop.exe
http://www.thespykiller.co.uk/forum/index.php?action=tpmod;dl=item16

First close any other programs you have running as this will require a reboot
Double click NoLop.exe to run it
Now click the button labelled "Search and Destroy"
<<your computer will now be scanned for infected files>>
When scanning is finished you will be prompted to reboot only if infected, Click OK
Now click the "REBOOT" Button.
A Message should popup from NoLop.
If not, double click the program again and it will finish Please Post the contents of C:\NoLop.log along with a fresh HijackThis log

--If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program.-- http://www.boletrice.com/downloads/mscomctl.ocx

 

[kitty500cat]

Do you know anything about "Wait Drv Jump Camp" or "copy flap joy.exe"?
I didn't see anything else that I know is bad, but some stuff I wasn't sure about. So if you know anything about any of these things, post it here.

Cheers

This thread is for the use of christopher2527 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in the Security and the Web forum.

 

[christopher2527]

ok

OK I did that here is the log for both

 

[dahli]

Download The Avenger by Swandog46, and save it to your Desktop.

Click on Avenger.zip to open the file
Extract avenger.exe to your desktop2.
Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):

Folders to delete:
C:\Documents and Settings\Hp_owner\Application Data\4 Once
C:\Documents and Settings\All Users\Application Data\Wait Drv Jump Camp

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.


3. Now, start The Avenger program by clicking on its icon on your desktop.
Under "Script file to execute" choose "Input Script Manually".
Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
Paste the text copied to clipboard into this window by pressing (Ctrl+V).
Click Done
Now click on the Green Light to begin execution of the script
Answer "Yes" twice when prompted.

4. The Avenger will automatically do the following:
It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
On reboot, it will briefly open a black command window on your desktop, this is normal.
After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.5.

Please copy/paste the content of c:\avenger.txt into your reply.

Run HijackThis and check the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
O4 - HKLM\..\Run: [jumpcampupweb] C:\Documents and Settings\All Users\Application Data\Wait Drv Jump Camp\StopEq.exe
O4 - HKCU\..\Run: [regs two] C:\DOCUME~1\HP_Owner\APPLIC~1\4ONCE~1\copy flap joy.exe

Click FIX CHECKED

Post a new HijackThis log.

 

[christopher2527]

ok

here they are

 

[dahli]

Looks like the folders were already deleted.

That HijackThis log is clean - how is your system running?

 

[christopher2527]

it is ok...but right after I did the avenger thing and the reboot it froze again...I will keep you posted though

My computer still freezes...I dont know what could be the problem

 

[kitty500cat]

What are your system specs (i.e. motheboard, power supply, RAM, processor, graphics card)? Please post them here. If you don't know any of this stuff, CPU-Z (a free download) will help you out.

cheers

 

[christopher2527]

here it is

ok I guess I will have to put every little thing down from that program seeing as how u didnt really tell me exactly what you want...so from the top

CPU
processor
name: intel celeron 340
code name: Prescott
Package: socket 478 mPGA
technology: 90nm voltage: 1.310 v
specification: Intel (R) Celeron(R) CPU 2.93GHz
family: F Model: 4 Stepping: 1
Ext. family: F Ext. Model: 4 Revision: E0
Instructions: MMX, SSE, SSE2, SSE3
Clocks Cache
Core Speed 2923.8MHz L1 Data:16KBytes
Multiplier: x 22.0 L1 Trace: 12 Kuops
Bus Speed: 132.9MHz Level 2: 256 KBytes
Rated FSB: 531.6MHz

Motherboard
Manufacturer:MICRO-STAR INTERNATIONAL CO., LTD
Model: Gamila/Giovani/Neon series 030
Chipset Intel i845G Rev.: B1
Southbridge: Intel 82801DB(ICH4)
Sensor: Winbond W83627THF
Bios
Brand: Phoenix Technologies, LTD
Version: 3.23
Date: 1/25/2005

Memory
General
Type: DDR
Size: 512 MBytes
Timings
Frequency: 166.1 MHz
FSBRAM: 4:5
CAS# Latency: 2.5 clocks
RAS# to #CAS Delay: 3 clocks
RAS# Precharge: 3 clocks
Cycle Time (Tras): 7 clocks

SPD
Memory Slot Selection
slot #1: DDR
Module Size: 512 MBytes Correction:None
Max Bandwidth: PC3200 (200 MHz) Registered: no
Manufacturer: Infineon Buffered: no
Part Number: 64D64320HU5C EPP: no
Serial Number: 031DC010
Manufacturing Date: Week 08, year 05
Timings Table
Frequency: 133MHz 166MHz 200 MHz
CAS# Latency: 2.0 2.5 3.0
RAS# to CAS#: 2 3 3
RAS# Precharge: 2 7 8
Tras: 6 7 8

 

[kitty500cat]

At this point I don't see anything bad in your HJT log. It doesn't seem to be malware. So about the only thing I can say is that some hardware geek is gonna have to say something here, unless some malware expert can say otherwise.

Cheers