Having blue screen problem

[Plastic Nev]

Hi, I wondered where you were!!:D

 

OK about being away on vacation though.

 

So it looks as if the RAM is OK now and apart from perhaps a fault on the hard drive, do you hear it ticking perhaps or other mechanical sounding noises, even faint ones?

 

If nothing there, Starbuck mentioned there may be something else to try yet so will have to leave it with him again, he may be here later or if not then tomorrow.

 

Nev.

[Shvensk]

I can't hear any ticking or mechanical noises other than the fan, but I haven't really been paying attention. I'll try to listen for something for the rest of the day, and I'll report tomorrow.

[Shvensk]

So far, I haven't heard anything abnormal. I probably would've heard something if the problem's with the machinery, so I guess that's another dead end.

[Starbuck]

Hi Shvensk

 

Starbuck mentioned there may be something else to try yet so will have to leave it with him again

Like i said previously..... there's no visible signs of malware.

But let's take a look to see if anything is hiding away.

 

Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop.

 

Link 1

Link 2

 

http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_FF.gif

 

 

http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_rename.gif

 

This is an example, you may rename ComboFix to anything you want.

 

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with the running of ComboFix.
  For more information read:
  How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
   
  Then:
   
  Double click on Combo-Fix.exe & follow the prompts.
   
  Vista/Win7 users should right click on the icon and select Run as Administrator.
   
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
   
  If running Vista/Win7, you will not see the recovery console screens as they are Win XP related
   
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
  

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

 

http://img.photobucket.com/albums/v708/starbuck50/cf1.png

 

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

 

http://img.photobucket.com/albums/v706/ried7/whatnext.png

 

Click on Yes, to continue scanning for malware.

 

Note:

Do not mouseclick combofix's window while it's running. That may cause it to stall

 

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

 

It may not showing anything.... but we won't know unless we try.

 

Thanks

[Shvensk]

Problem. I installed/renamed ComboFix, disabled my antivirus, and then ran ComboFix, but after a short scan, my PC blue-screened and shut down. I've just turned it back on, and I don't know how to counter that. It's running fine now, but I don't think I should run ComboFix again unnecessarily unless we can stop that blue screen.

[Starbuck]

Please take a look here:

C:\ComboFix.txt

 

please post the report if one was generated.

 

Thanks

[Shvensk]

Sorry, nothing was generated. I couldn't find a text file anywhere.

[Starbuck]

Sorry, nothing was generated. I couldn't find a text file anywhere.

That's a pity.

It may have explained the blue screen.

 

Ok, plan b then:

 

Download Dr.Web CureIt!.

 

Click the free download option.

Tick 'I accept'... then click on download.

Click on 'Save File'.

 

Double-click on the downloaded file.

Choose a desired protection mode.

 

Choose Standard mode:

 

Note:

In the enhanced protection mode Dr.Web CureIt! is run on a protected desktop where no other application can be launched.

In order to continue working in the enhanced protection mode choose OK or click Cancel to switch to the standard mode.

 

Click the “Start” button in the anti-virus window. Select “Yes” in the confirmation dialogue, and wait while Dr.Web CureIt! scans system memory and autorun objects.

 

Wait while the utility scans your system.

• This will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it. This is only a short scan.
  
• Once the short scan has finished, select Complete scan.
  
• Click the green arrow http://i154.photobucket.com/albums/s258/evilfantasy69/drweb.jpg at the right, and the scan will start.
  
• Click Yes to all if it asks if you want to cure/move the file.
  
• When the scan has finished, in the menu, click File and choose Save report list
  
• Save the report to your desktop. The report will be called DrWeb.csv
  
• Close Dr.Web Cureit.
  
• Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
  
• Copy and paste that log in the next reply. You can use Notepad to open the DrWeb.cvs report.
  

During the scan, a pop-up window may open asking for full version purchase. Simply close the window by clicking on X in upper right corner.

Note:

Dr.Web CureIt! does not require installation and is compatible with all known anti-virus software. You do not need to disable your anti-virus software to check your system with Dr.Web CureIt!

 

Please be aware, this scan can take quite a long time..... but is very thougher.

Edited July 11, 2012 by Starbuck

[Shvensk]

Sorry, I've been busy with stuff lately. I'll try to do it right away though. I'm off to a camp soon, so I'll be gone for a while. I'll report if I can complete this before I leave.

[Starbuck]

Ok, thanks for keeping us informed.

[Shvensk]

I just want to say that I'm back. However, the Dr.Web CureIt has been running for just a bit more than a day, and so far I got through the initial scan, but it's only about 10% done the complete scan. If it doesn't speed up, it won't finish for about a week. xD

[Starbuck]

Hi Shvensk

 

Did the scan finish or are you still having problems with it?

[Shvensk]

The scan just finished. It took quite a while, but here's the report.

 

OTL.scr;C:\Documents and Settings\Henrik Lindholm\Desktop\Computer Fix Stuff;Trojan.Siggen4.4395;Incurable.Moved.;

OTL.scr;C:\Documents and Settings\Henrik Lindholm\DoctorWeb\Quarantine;Trojan.Siggen4.4395;Incurable.Moved.;

[Starbuck]

Well nothing showing there.

It's not the first time that another program has flagged OTL....... it's only because of how it works, not what it does.

 

Out of curiosity, have you tried running Combofix again?

If you do try..... remove the present copy you have (right click and select delete) and download a fresh copy.