help me!!!

[herm0016]

i have a epox 9npa-ultra with a venice 3000. was running for about 4 days, i went to use it and each program that was running had "performed an illigal operation" and i had to click ok do all of them could shut down. including explorer. then i restarted, same thing happened but then i was able to close all the stuff. a few seconds later i got a blue screen of death. now each time i restart it it does the whole thing again. i need the info on the hd. papers for college. help me please!

 

[mechBgon]

Will it run in Safe Mode? Also, could you replace the sample info below with your own info, and also tell me is your WinXP CD available and what Service Pack level it is natively at (SP1, SP2, or no SP at all):

[*]OS AND SECURITY

• Operating System WindowsXP Professional
• Service Pack SP2
• Internet connection Cable
• Hardware firewall Netgear RP614 router
• Software firewall WindowsXP firewall
• Antivirus Norton Antivirus 2004

 

[birdpup]

Originally posted by: herm0016
i have a epox 9npa-ultra with a venice 3000. was running for about 4 days, i went to use it and each program that was running had "performed an illigal operation" and i had to click ok do all of them could shut down. including explorer. then i restarted, same thing happened but then i was able to close all the stuff. a few seconds later i got a blue screen of death. now each time i restart it it does the whole thing again. i need the info on the hd. papers for college. help me please!

What was the error code for the blue screen error? Do you remember or if it repeats can you make note of it?

It would do you well to answer mechBgon's questions since he is very knowledgeable.

I would also recommend testing your memory with memtest and then testing each of your disk drives with the manufacturer's diagnostic utility. Additionally, can you provide information on your power supply, such as manufacturer, wattage, and amps on the 12V rail?

[*]Memory Tests

• memtest86
• memtest86+

[*]Hard Drive Manufacturer Diagnostic Utilities

• Seagate
• Western Digital
• Maxtor
• Fujitsu
• Hitachi
• Everest Diagnostic Software (not confined to any one hard drive manufacturer)

[*]Data Recovery Programs

• TestDisk
• R-Studio
• Runtime's GetDataBack
• Ontrack's Easy Recovery Pro
• Quetek
• File Scavenger
• HDD Regenerator
• Freeware Data Recovery Tools ***Free***
• PC Inspector ***Free***
• ACR Data Recovery
• DataRecoveryWizard
• Digital Camera Memory Recovery: PC Inspector

[*]Rescue Disks

• UBCD4Win
• BartPE
• Insert
• Knoppix

 

[herm0016]

ok, here it goes.
xp pro sp2, i do have the oem disk, symantec enterprise editon, linksys router firewall, nvidia firewall, windows firewall, connection is a lan (campus wide) power supply is antec true blue bought it used, not really sure on the rateings but have not had a problem before this. blue screen says something about the hd i think. i also have reason to belive that it may be a virus. i got a message last time i started it about some file called backdoor.??? then i got the blue screen again. now im running it with the task manager (using the run function from there to run my antivirus. thanks for the quick reply.

 

[Kogan]

I had a virus that did something like that to me once. Just be sure to run an updated virus scan, and if it finds any problems, that's probably the issue.

My virus actually overwote most all .exe files on my hard drive, so I basically had to back up what I could, then format and re-install.

If you've got no viruses, check some obvious things first - like if the CPU fan is still working. And if overclocked, set it back to stock speeds to see if it helps.

good luck!

 

[herm0016]

oh, and how do i start it in safe mode? i cant seem to get it to. i tried f8, f12 and f2. by the way, while running it with task man. it restarted with about 1/2 the scan done. no blue screen this time. right now im on my laptop.

 

[mechBgon]

Excellent You can also bring a McAfee scanning utility to bear on it using the Task Manager technique. right-click this link and Save Target, it's a text file showing how to get & use McAfee's beta command-line scanner, which they update at least once a day. McAfee may pick up some stuff that Symantec misses, and vice versa, so it couldn't hurt.

I would start the system in actual Safe Mode With Command Line so it never starts Explorer.exe in the first place. There are worms/viruses that inject themselves into EVERY running process on the system when they infect, so that sort of sounds like what might've happened.

It also may help to fully enable Data Execution Prevention as shown in this pic and to disable System Restore. If you disinfect the system but it won't run Windows anymore, then you can do what Microsoft calls an "in-place upgrade," aka a repair installation. In-place upgrade routine

 

[mechBgon]

Addendum: one other thing I'd do, is to configure your Linksys router to only pass Port 53 and Port 80 for the moment. Backdoors frequently use random or specific high-numbered ports, sometimes the classic IRC ports 6666 and 6667 but sometimes others, to check in for duty with their bosses. If you arbitrarily block those ports, their lines of communication are cut.

This page shows the concept in practice for a Netgear router, you'll need to adapt a bit for a Linksys. I believe you would create your own custom Services, one with Ports 1-52, one with 54-79, and one with 81-65535, and then tell the router to block those all the time. Note that this will make FTP and email stop working, but you can always adjust your rules once your crisis is over and allow more ports.

 

[mechBgon]

Originally posted by: herm0016
oh, and how do i start it in safe mode? i cant seem to get it to. i tried f8, f12 and f2. by the way, while running it with task man. it restarted with about 1/2 the scan done. no blue screen this time. right now im on my laptop.

Shut the desktop down, then start it again and begin tapping the F8 key repeatedly as it POSTs and begins booting. A black-&-white text menu should appear with various options.

 

[herm0016]

well, i just used pro magic plus to restore the computer. lost everything. dont have time to screw with it anymore. thanks for the help. now i have to start scanning and such, then reinstalling everything.

 

[herm0016]

oh wait. that did not help either.

 

[herm0016]

i think the next step is format and reinstall

 

[birdpup]

You mentioned there are papers on that drive. I recommend putting that drive in as a slave to another system and scanning the drive with data recovery software as provided above. Do this before you reinstall your operating system or the files will be lost.

For the data recovery tools, I recommend using GetDataBack but each of those listed utilities have been recommended by others.

EDIT:
Another method for booting in Safe Mode is to run "msconfig" at the command line, then selecting "Diagnostic Startup" on the General tab for the System Configuration Utility.

 

[herm0016]

i have a print out, i can re type it. thanks for the quick response. this is what makes this forum great. i just dont have time to mess with fixing it. it will be faster to redo it all.

 

[amdskip]

nm

 

[helpmeout]

Chill out, Herm. Run down to the Ambassador or the Doghouse for a beer. Reinstall tomorrow. How's everything in Houghton?

 

[helpmeout]

OOPS!

 

[herm0016]

houghton is great. to bad i cant go get a beer at the ambo i have to order in from my more privliged friends, though a pizza sounds good...... are you in houghton?

 

[helpmeout]

Was born and raised in Houghton, live in NC now. Spent a few weeks up there in August. Great in the summer. Yeah, there's always a way to get a beer. Enjoy your youth, you'll get old too soon. Have fun up there.