Unsolved
This post is more than 5 years old
1 Message
0
350
October 6th, 2008 00:00
Computer reboots at random, works fine in Safe Boot
My computer reboots spontaneously, sometimes right after a loging, sometimes it gives me a few minutes of work. It works absolutely fine in Safe Mode. Neither McAfee virus scan nor AdAware (all up-to-date) find anything.
Thank you in advance for your help!
-- Alex
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:19:00 PM, on 10/5/2008
Platform: Windows XP SP3 (WinNT
5.01.2600)
MSIE: Internet Explorer v7.00
(7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-
Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\HP\Digital
Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft
Office\Office\OSA.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\Common
Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
C:\Program
Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\CheckPoint\SSL Network
Extender\slimsvc.exe
C:\Program Files\Common
Files\Authentium\AntiVirus\dvpapi.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1
\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1
\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Trend
Micro\HijackThis\HijackThis.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\oracle\product\10.2.0\db_1
\bin\nmesrvc.exe
D:\oracle\product\10.2.0\db_1
\bin\isqlplussvc.exe
D:\oracle\product\10.2.0\db_1
\BIN\TNSLSNR.exe
D:\oracle\product\10.2.0\db_1
\jdk\bin\java.exe
d:\oracle\product\10.2.0\db_1
\bin\ORACLE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program
Files\CheckPoint\SecuRemote\bin\SR_WatchD
og.exe
C:\WINDOWS\System32\svchost.exe
C:\Program
Files\CheckPoint\SecuRemote\bin\SR_GUI.ex
e
C:\WINDOWS\system32\cmd.exe
D:\oracle\product\10.2.0\db_1\perl\5.8.3
\bin\MSWin32-x86-multi-thread\perl.exe
D:\oracle\product\10.2.0\db_1
\jdk\bin\java.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program
Files\CheckPoint\SecuRemote\bin\SR_Servic
e.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
D:\oracle\product\10.2.0\db_1
\bin\emagent.exe
D:\oracle\product\10.2.0\db_1\perl\5.8.3
\bin\MSWin32-x86-multi-thread\perl.exe
D:\oracle\product\10.2.0\db_1\perl\5.8.3
\bin\MSWin32-x86-multi-thread\perl.exe
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?
LinkId=69157
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?
LinkId=54896
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?
LinkId=54896
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?
LinkId=69157
R1 -
HKCU\Software\Microsoft\Windows\CurrentVe
rsion\Internet Settings,ProxyOverride =
*.local
O2 - BHO: AcroIEHelperStub - {18DF081C-
E8AD-4283-A596-FA578C2EBDC3} - C:\Program
Files\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelperS
him.dll
O2 - BHO: Oracle DBA Toolbar - {4E7BD74F
-2B8D-469E-D3F2-B93FFED6ED63} -
C:\PROGRA~1\ORACLE~1\ORACLE~1.DLL
O2 - BHO: (no name) - {549B5CA7-4A86-
11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-
1895-11CF-8E15-001234567890} -
C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-
D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program
Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-
4E79-B68D-6309F01C5231} - C:\Program
Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} -
c:\program
files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-
4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Oracle DBA Toolbar -
{4E7BD74F-2B8D-469E-D3F2-B93FFED6ED63} -
C:\PROGRA~1\ORACLE~1\ORACLE~1.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-
11d4-9B18-009027A5CD4F} - c:\program
files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D
-469E-8CB0-AB60BB9AAE22} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\system32
\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program
Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\system32
\NVMCTRAY.DLL,NvTaskbarInit
O4 - Startup: HotSync Manager.lnk =
C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: HP Digital Imaging
Monitor.lnk = C:\Program Files\HP\Digital
Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Find
Fast.lnk = C:\Program Files\Microsoft
Office\Office\FINDFAST.EXE
O4 - Global Startup: Microsoft Office.lnk
= C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: Office Startup.lnk =
C:\Program Files\Microsoft
Office\Office\OSA.EXE
O4 - Global Startup: WinZip Quick
Pick.lnk = C:\Program
Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0
-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.6.0_07
\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java
Console - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\Program
Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-
D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38
-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem:
@xpsp3res.dll,-20001 - {e2e2dd38-d088-
4134-82b7-f2ba38496583} -
C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910
-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows
Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP:
c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: Web-Based Email Tools -
http://email.secureserver.net/Download.CA
B
O16 - DPF: {01113300-3E00-11D2-8470-
0060089874ED} (Support.com Configuration
Class) -
https://activatemyfios.verizon.net/sdcCom
mon/download/FIOS/Verizon%20FiOS%
20Installer.cab
O16 - DPF: {17492023-C23A-453E-A040-
C7C580BBF700} (Windows Genuine Advantage
Validation Tool) -
http://go.microsoft.com/fwlink/?
LinkId=39204&clcid=0x409
O16 - DPF: {1BFB1268-6353-495A-AB78-
97BF7CAB4D52} -
https://www.onlinefilefolder.com/gdedtwrp
.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-
00A024541EE3} (Citrix ICA Client) -
https://remote.barclaycardus.com/CitrixSe
ssionInit/ICAWEB/icaweb.cab
O16 - DPF: {406B5949-7190-4245-91A9-
30A17DE16AD0} (Snapfish Activia) -
http://www1.snapfish.com/SnapfishActivia.
cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-
5A1EDB1D8A21} -
O16 - DPF: {6F750202-1362-4815-A476-
88533DE61D0C} (Kodak Gallery Easy Upload
Manager Class) -
http://www.kodakgallery.com/downloads/BUM
/BUM_WIN_IE_2/axofupld.cab
O16 - DPF: {B4CB50E4-0309-4906-86EA-
10B6641C8392} (SlimClient Class) -
https://ra01.barclaycardus.com/CSHELL/ext
ender.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-
C18E1ADA4389} -
http://download.mcafee.com/molbin/shared/
mcgdmgr/1,0,0,26/mcgdmgr.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-
04C2F616BCA7} (get_atlcom Class) -
http://wwwimages.adobe.com/www.adobe.com/
products/acrobat/nos/gp.cab
O16 - DPF: {EC0403E0-9158-4CF8-A2B6-
3C62C3B9B6B7} (CCAOControl Object) -
https://remote.barclaycardus.com/CitrixLo
gonPoint/Barclays/EPAClient/EPAClient.exe
O23 - Service: Lavasoft Ad-Aware Service
(aawservice) - Lavasoft - C:\Program
Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device -
Apple Inc. - C:\Program Files\Common
Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple
Inc. - C:\Program
Files\Bonjour\mDNSResponder.exe
O23 - Service: Check Point SSL Network
Extender (cpextender) - Check Point
Software Technologies - C:\Program
Files\CheckPoint\SSL Network
Extender\slimsvc.exe
O23 - Service: DSBrokerService - Unknown
owner - C:\Program
Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) -
Authentium, Inc. - C:\Program
Files\Common
Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: getPlus(R) Helper - NOS
Microsystems Ltd. - C:\Program
Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service
(gusvc) - Google - C:\Program
Files\Google\Common\Google
Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table
Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common
Files\InstallShield\Driver\11\Intel 32
\IDriverT.exe
O23 - Service: iPod Service - Apple Inc.
- C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: MBackMonitor - McAfee -
C:\Program
Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc)
- McAfee, Inc. - C:\PROGRA~1
\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent
(McNASvc) - McAfee, Inc. - c:\PROGRA~1
\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) -
McAfee, Inc. - C:\PROGRA~1
\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service
(McProxy) - McAfee, Inc. - c:\PROGRA~1
\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner
(McShield) - McAfee, Inc. - C:\PROGRA~1
\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards
(McSysmon) - McAfee, Inc. - C:\PROGRA~1
\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall
Service (MpfService) - McAfee, Inc. -
C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: MySql - Unknown owner -
C:/mysql/bin/mysqld-nt.exe
O23 - Service: Intel NCS NetService
(NetSvc) - Intel(R) Corporation -
C:\Program
Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Driver Helper
Service (NVSvc) - NVIDIA Corporation -
C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OracleDBConsoledawgora -
Oracle Corporation -
D:\oracle\product\10.2.0\db_1
\bin\nmesrvc.exe
O23 - Service:
OracleOraDb10g_home1iSQL*Plus - Oracle -
D:\oracle\product\10.2.0\db_1
\bin\isqlplussvc.exe
O23 - Service:
OracleOraDb10g_home1TNSListener - Unknown
owner - D:\oracle\product\10.2.0\db_1
\BIN\TNSLSNR.exe
O23 - Service: OracleServiceDAWGORA -
Oracle Corporation -
d:\oracle\product\10.2.0\db_1
\bin\ORACLE.EXE
O23 - Service: Radialpoint Unicorn Update
Service (RPSUpdaterR) - Radialpoint Inc.
- C:\Program Files\Verizon\PC Security
Checkup\rpsupdaterR.exe
O23 - Service: Check Point SecuRemote
Service (SR_Service) - Check Point
Software Technologies - C:\Program
Files\CheckPoint\SecuRemote\bin\SR_Servic
e.exe
O23 - Service: Check Point SecuRemote
WatchDog (SR_WatchDog) - Check Point
Software Technologies - C:\Program
Files\CheckPoint\SecuRemote\bin\SR_WatchD
og.exe
O23 - Service: Apache Tomcat (Tomcat5) -
Apache Software Foundation - C:\Program
Files\Apache Software Foundation\Tomcat
5.0\bin\tomcat.exe
--
End of file - 10970 bytes