Computer Freezes

[Starbuck]

Yes i'll be around today and tomorrow.

[Morag]

Hi Starbuck, had a few probs today but finally got MBAM running in safe mode (been on for an hour) so hopefully have some updates soon. At one point today it did a start up repair and this was the result

start up repair

root cause found:

system volume on disk is

corrupt

repair action: File system

repair(chkdsk)

result: Completed successfully.

Error code = 0X0

[Starbuck]

Hi Morag,

 

system volume on disk is

corrupt

repair action: File system

repair(chkdsk)

result: Completed successfully.

Error code = 0X0

If this is down to the hard drive, then it may well need replacing as soon as is possible.

To be on the safe side, make sure anything that needs to be saved or backed up is done.

Then if the worse happens, you won't lose any data.

We can continue with the scans until we're sure though..... just in case it's down to something we can sort for you.

[Morag]

This is the log from the malwaretrying to download the combofix as well!

Malwarebytes' Anti-Malware 1.51.1.1800

www.malwarebytes.org

Database version: 7632

Windows 6.0.6002 Service Pack 2 (Safe Mode)

Internet Explorer 8.0.6001.19120

03/09/2011 19:12:32

mbam-log-2011-09-03 (19-12-32).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)

Objects scanned: 543393

Time elapsed: 2 hour(s), 1 minute(s), 21 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 1

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

c:\programdata\22006616 (Rogue.Multiple) -> Quarantined and deleted successfully.

Files Infected:

(No malicious items detected)

[Starbuck]

Thanks for that Morag,

 

looks like a leftover from a rogue malware infection.

It'll be interesting to see what Combofix finds.

These rogue malware programs can sometimes cause quite a few system problems, but CF is used to dealing with them and will try to correct some of the changes.

[Morag]

Really struggling to get combofix to run, having one last try in safe mode but safe mode isn't even opening either. The combofix ran to stage 50 at one point before it froze.

[Starbuck]

Ok, if you can't get safe mode to run we may have to bite the bullet and fall back on the recovery discs.

But as i said earlier, if the corruption is due to a failing hard drive the recovery might fail.

But i see no other option at the moment.

[Morag]

Hi don't know whats happened but now it won't even start up, the on switch is lit up and the fan seems to be running but that's it!!

[Starbuck]

I think it's time to try the recovery disc now.

Hopefully it'll get the system up and running again. ( if not, it may need the hard drive replacing.

This link should explain things for you:

 

http://www.ehow.com/how_5782228_use-toshiba-laptop-recovery-disk.html

[Morag]

Hi Starbuck, thanks for all your help, I finally decided to take the computer back to the repair shop for 2 reasons firstly I thought it would be the inevitable final outcome and my son is needing it for restarting uni and secondly as I thought they would back up and reinstall all his data etc, sadly they didn't do that!!! They did return his old hard drive, not sure quite what we're supposed to do with it! He had backed up all his files etc so its just a matter of him reinstalling all the software etc but i'm not entirely happy! Anyway I really appreciated all the help you gave me to try and resolve this issue, and wondered if it was likely a virus had caused this problem in the first place and if there was anything we should do to stop it happening again. We use Norton Internet security for protection.

[Plastic Nev]

Hi Morag, Starbuck is now off on holiday for a week, however I will first offer some advice, others may also.

 

Now the hard drive has been replaced the computer will now be just the same as when first bought. I must ask, did the repair technician re-install the original operating system, or a new one? if so please ask them if it is a legal install, you may have been billed for it if a new one.

 

Install the Norton if you wish or haven't yet done so. It would pay to also install Malwarebytes, this is an anti-malware in general detector and remover and is useful to complement the anti-virus of the Norton.

Download and install the free version from here=

 

http://www.malwarebytes.org/

 

Click the white button for the free version.

Once installed, always check for updates first, then run a scan at regular intervals to ensure the machine stays clean of spywares and other malware.

 

As for your other question, hard drives can fail for all sorts of reasons, however laptop hard drives do get more punishment in knocks and bangs which will shorten their life, however it is extremely unlikely to have been virus or other malware, they cannot do physical damage, only software and operating systems are damaged by malwares.

 

I am also glad to know that everything was backed up so there is no data loss from the duff hard drive.

If keeping that drive, at some stage you may find a need to recover something from it perhaps, if so let us know and we can advise how best to do so.

 

If on the other hand you do not wish to keep it, don't just throw it away, someone else may recover it and any sensitive data that will still be on it. Totally destroy it so that all recorded data is lost and cannot be recovered by anyone, therefore protecting your privacy.

 

Nev.

[Morag]

Hi Nev, I'm sorry I thought I had replied to this post but I guess it hadn't posted properly! Thanks for all the help. His computer was going fine until today when he switched it on and got this message

windows failed to start. A recent hardware or software change might be the cause. To fix the problem:

1. Insert your windows installation disc and restart your computer.

2. Choose your language settings, and then click "next".

3. Click "repair your computer".

If you don't have this disc, contact your system administrator or computer manufacturer for assistance.

File:\windows\system32\hal.dll

Status: 0xc00000e9

Info: Windows failed to load because the HAL is missing, or corrupt.

I plan to return this back to the repair shop tomorrow but wondered if you have any suggestions or thoughts.

[Starbuck]

Hi Morag,

 

Windows failed to load because the HAL is missing, or corrupt.

This could be due to a few things.

After getting the system back did you install IE8?

this can sometimes cause this error.

If you did, uninstall IE8

 

Sometimes this is just a random error, do you still get the error after a reboot?

 

A system restore to an earlier date may also correct this.

 

or it could be due to an incorrect Boot.ini file.

If this is the case, the boot.ini file may need replacing.

[Morag]

Hi had IE7 but took the upgrades and ended up with IE9! The computer won't allow us past that error message so would be unable to uninstall anything! Still the same after a switch off/on. How does the boot file get replaced? Thanks again

Morag

[Starbuck]

If you can't get passed the error message, everything is a non starter.

The boot.ini problem is normally related to Win XP, as you are running Vista this may not be the problem.

A repair install may be the only answer here.

As you plan to take the system back tomorrow, i'd be inclined to let them deal with it.

[Morag]

Ok thanks will let u know how we get on.

[Morag]

They have said it was a faulty new hard drive and are replacing it, hope thats the end of it now!

[Starbuck]

Hi Morag,

 

A faulty hard drive was one of the other options i thought of, but as the hard drive had just been changed i discounted it.

Moral of the story.... never assume anything. :rolleyes:

 

Like you say let's hope that is the end of it now.

[Morag]

Hi Starbuck

Got computer back,hopefully all well now.

In answer to Nev I asked if it was genuine windows they had reinstalled and they said it was as they had to register the code on the base of the computer. They also installed Avira Antivir Personal, will that give adequate protection or should I reinstall the Norton?

Mo

[Starbuck]

Hi Morag,

 

Stick with Avira.

I use that on 2 systems and have found it really good.

Norton will charge you.... and to be honest the cover you get isn't worth paying for.

The only issue i have had with Avira is that sometimes i've had to check for new definitions.... it doesn't always download them automatically.

But it is a good program.

[Morag]

Ok thats great thanks, we already had the Norton cos I had renewed it prior the original problem, i've got a 3 license and have put it on our desktop computer anyway so its fine not going entirely to waste! Will bear this in mind when i need to renew all the other laptops, happy to leave the Avira on knowing the laptop is protected.

Thanks once again :)