This afternoon, I was using my PC non- chalantly, minding my own bussiness when all the sudden it started to shut down on me! I was like " I haven't finished yet":rolleyes: What can be going on with it??

I think this is the part where robyrob comes in and gives computer advice.

robyrob to the rescue!

Originally posted by Brian
I think this is the part where robyrob comes in and gives computer advice.

robyrob to the rescue! oh goodness :lol:


what version of windows? does it give any error messages or any warning signs before it shuts off? is it making any strange noises or smells? will it reboot into windows OK if you just turn it on again right away?

how long will it stay on for before it reboots?

Reach around the back of the computer where the exhaust fan is for the power supply (there should be a round vent somewhere near the top) you should feel hot air coming out, if there isn't the fan may not be working, and it may be overheating.

It could be a bad power supply or a bad fan on the motherboard, the trick is to find out if this actually a hardware or a software problem - try boot into the BIOS setup program - when you first power on the machine it should give you an option to enter "Setup" (usually F1, F2 or the "Delete" key). Let it sit there at the BIOS screen longer than what it takes to shut down. If it DOES - you have a hardware problem, that means $$ to replace parts.

You COULD try open up the case and blow out the dust and power it on to SEE if all the fans are working, but only do so if you are comfortable with it.

If it DOESNT shut down, it MAY be a software problem - best bet is go into Safemode (tap the "F8 key as you are booting up) and try a system restore (Windows XP only).

oh and cross your fingers :)

Originally posted by robyrob
oh goodness :lol:


what version of windows? does it give any error messages or any warning signs before it shuts off? is it making any strange noises or smells? will it reboot into windows OK if you just turn it on again right away?

how long will it stay on for before it reboots?

Reach around the back of the computer where the exhaust fan is for the power supply (there should be a round vent somewhere near the top) you should feel hot air coming out, if there isn't the fan may not be working, and it may be overheating.

It could be a bad power supply or a bad fan on the motherboard, the trick is to find out if this actually a hardware or a software problem - try boot into the BIOS setup program - when you first power on the machine it should give you an option to enter "Setup" (usually F1, F2 or the "Delete" key). Let it sit there at the BIOS screen longer than what it takes to shut down. If it DOES - you have a hardware problem, that means $$ to replace parts.

You COULD try open up the case and blow out the dust and power it on to SEE if all the fans are working, but only do so if you are comfortable with it.

If it DOESNT shut down, it MAY be a software problem - best bet is go into Safemode (tap the "F8 key as you are booting up) and try a system restore (Windows XP only).

oh and cross your fingers :)

It's an XP Home version 2000. No error msgs, the screen just starts 'blinking' while is thinking about kicking me off. No smells or noises of any kind. It reboots fine. It doesn't stay on for long, I get the msg "Windows is shutting down' and there she goes. hot Air comes out from the fan on the back. Doesn't seem to have a hardware problem or a software one either after checking off the list you made

Originally posted by Unmarried*happy
It's an XP Home version 2000. No error msgs, the screen just starts 'blinking' while is thinking about kicking me off. No smells or noises of any kind. It reboots fine. It doesn't stay on for long, I get the msg "Windows is shutting down' and there she goes. hot Air comes out from the fan on the back. Doesn't seem to have a hardware problem or a software one either after checking off the list you made gimme a minute to check something...

Originally posted by robyrob
gimme a minute to check something... when it gives you that message that it is shutting down hold down the "Windows" key and press the "R", type in "CMD" and enter, then at the command prompt type in: "shutdown.exe -a" and enter

is your antivirus software up-to-date?

it SOUNDS like you have a variation of the Blaster worm or something similar....

here's the Symantec info page for it:
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

and the MS patch for it (I would suggest you use the removal instructions then do a complete Windows Update)
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp

there is a removal tool on the Symantec site:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Originally posted by robyrob
it SOUNDS like you have a variation of the Blaster worm or something similar....

here's the Symantec info page for it:
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

and the MS patch for it (I would suggest you use the removal instructions then do a complete Windows Update)
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp

there is a removal tool on the Symantec site:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html


I went to the Symantec site and downloaded the tool to check for the stupid worm :rolleyes: BUT when I went to the microsoft site to download the patch I got this message:
"Setup could not verify the integrity of the file update.inf. Make sure the cryptographic service is running in this computer."

Originally posted by Unmarried*happy
I went to the Symantec site and downloaded the tool to check for the stupid worm :rolleyes: BUT when I went to the microsoft site to download the patch I got this message:
"Setup could not verify the integrity of the file update.inf. Make sure the cryptographic service is running in this computer." use the removal tool first then download the patch - dont worry about the file integrity warning, but if it doesnt work try Windows update

Originally posted by robyrob
use the removal tool first then download the patch - dont worry about the file integrity warning, but if it doesnt work try Windows update

I'll let you know if tomorrow my computer still works!:D

Originally posted by Unmarried*happy
I'll let you know if tomorrow my computer still works!:D OK - just make sure to update your antivirus and do a FULL scan :thumbsup:

When I go to the Windows Update site, it tells me that 'my security settings' can't display the page correctly and that the updates can't be downloaded:rolleyes:

Originally posted by Unmarried*happy
When I go to the Windows Update site, it tells me that 'my security settings' can't display the page correctly and that the updates can't be downloaded:rolleyes: go to the >Tools>Internet Options menu in Internet Explorer, click on the "Security" Tab and click on the "Default Level" button, "OK" then close and re-open IE and try again

(may want to clear the temporary files on the General tab before you close it too)

Originally posted by robyrob
go to the >Tools>Internet Options menu in Internet Explorer, click on the "Security" Tab and click on the "Default Level" button, "OK" then close and re-open IE and try again

(may want to clear the temporary files on the General tab before you close it too)

I checked the Security Tab and it's on Default already so I checked the other settings and it still wont let me update.

Originally posted by Unmarried*happy
I checked the Security Tab and it's on Default already so I checked the other settings and it still wont let me update. you ran the removal tool and rebooted?

I think that there is another way to stop the dcom service....

you need to make sure that the worm is out of there or it may not let you do any updates...

i have to get to bed now :( , my best suggestion is to follow the steps on the first Symantec link I posted to ensure that it is removed, AND try do a virus scan to try and identify the worm and possibly remove it

Originally posted by robyrob
you ran the removal tool and rebooted?

I think that there is another way to stop the dcom service....

you need to make sure that the worm is out of there or it may not let you do any updates...

I ran the Symantec program to remove the Blaster but it didn't found anything. I also did Spybot and cleared some pests around the system BUT when I still go to the Microsoft site it won't let me update a thing.:rolleyes:

When you Ctrl + Alt + Delete, go to the Processes tab and click on the "Image Name" thing (if you click on it once, it will alphabetize your Processes list), do you see something that says "msblast" in there?

I got hit with MSBlast when it struck in August 2003 and I remember seeing it in my Processes tab then...But I don't remember if it ended in a .exe.

Originally posted by PZelda
When you Ctrl + Alt + Delete, go to the Processes tab and click on the "Image Name" thing (if you click on it once, it will alphabetize your Processes list), do you see something that says "msblast" in there?

I got hit with MSBlast when it struck in August 2003 and I remember seeing it in my Processes tab then...But I don't remember if it ended in a .exe.

When I use the Ctrl Alt Del my PC thinks it's special and starts acting like a 3yr old without a nap. I took the shortcut and clicked the taskbar to find the Processes tab, and found nothing out of the ordinary there.

Originally posted by Unmarried*happy
When I use the Ctrl Alt Del my PC thinks it's special and starts acting like a 3yr old without a nap. I took the shortcut and clicked the taskbar to find the Processes tab, and found nothing out of the ordinary there. what DOES it list in there? (I know that there may be a lot, but we need to know what's going on)

you may want to try TrendMicro's housecall online, or some other online virus scan - just to see if it can identify anything

Originally posted by robyrob
what DOES it list in there? (I know that there may be a lot, but we need to know what's going on)

you may want to try TrendMicro's housecall online, or some other online virus scan - just to see if it can identify anything

Here's the list:
cidaemon.exe
taskmgr.exe
mpbtn.exe
TheWea~1.exe
NCLaunch.exe
qttask.exe
vsmon.exe
VetMsgNt.exe
svchost.exe
aim.exe
compaq-rba.exe
cisvc.exe
avgserv.exe
Vettray.exe
LexPPS.exe
spoolsv.exe
LexBces.exe
svchost.exe
svchost.exe
Ybrowser.exe
svchost.exe
hpztsb07.exe
avgcc32.exe
svchost.exe
igfxtray.exe
tfswctrl.exe
lsass.exe
rundll.exe
services.exe
msmsgs.exe
winlogon.exe
crss.exe
ipmon32.exe
WKUfind.exe
MotiveSB.exe
smss.exe
evntsvc.exe
ycommon.exe
ybrwicon.exe
IPclient.exe
cfd.exe
explorer.exe
zlclient.exe
hkcmd.exe
hpsysdr.exe
Weather.exe
System
SystemIdle Process

How do you know it's not just something easy, like it's shutting off because it's overheating?

You sure seem to get a lot of viruses. What's up with that?:)

Originally posted by Lodee
How do you know it's not just something easy, like it's shutting off because it's overheating?



Cause I have already done it:p :D

the list: (left out any essential windows services)

mpbtn.exe - non-essential process used for Comcast Cable support
TheWea~1.exe - spyware related to Weatherbug
NCLaunch.exe - SWF Studio, an extension to Flash (usually installed with shareware screensavers)
qttask.exe - quicktime updater
vsmon.exe - zone alarm
VetMsgNt.exe - InoculateIT AntiVirus
aim.exe - AOL instant messenger
compaq-rba.exe - "helper" file sends support info to Compaq
avgserv.exe - AVG AntiVirus
Vettray.exe - eTrust EZ Antivirus service
LexPPS.exe - Lexmark printer port server, unless you share your printer over a network, use the Search command on the Start menu and rename LEXPPS.EXE to LEXPPS.EXE.OLD
LexBces.exe - software that works with Lexmark printers with internal NIC cards
Ybrowser.exe - yahoo service
hpztsb07.exe - hp deskjet utility
avgcc32.exe - AVG service
igfxtray.exe - Intel graphics utility
tfswctrl.exe - necessary for DLA (cdrw software)
msmsgs.exe - MS messenger service
ipmon32.exe - Verizon diagnostic monitoring utility
WKUfind.exe - updater service for MS Picture-It!
MotiveSB.exe - tech support utility (used by hp/AT&T/ibm etc)
ycommon.exe - yahoo service
ybrwicon.exe - yahoo service
IPclient.exe - Verizon diagnostic monitoring utility
cfd.exe - Motive software - allows software updates/downloads for remote tech support
zlclient.exe - ZoneLabs firewall
hkcmd.exe - service installed with various usb keyboards with extra buttons
hpsysdr.exe - hp/compaq related service
Weather.exe - spyware related to Weatherbug

in other words, I see a little spyware, a little garbage, some conflicts (looks like you have software for numerous printers and ISP's) not a big problem, except for what looks like multiple antivirus programs installed - that can potentially be a big problem you should uninstall ONE of them

what I DONT see are signs of a virus, that doesn't mean that you don't have one, just that I can't see it.


so what does this all mean and what should you do?

well, I would try to do a System Restore from safe mode, go back to a point that you remember things were working OK, if that fails you could try run HijackThis to see if it finds anything else, or backup all your data and reinstall Windows.

Originally posted by robyrob
the list: (left out any essential windows services)

mpbtn.exe - non-essential process used for Comcast Cable support
TheWea~1.exe - spyware related to Weatherbug
NCLaunch.exe - SWF Studio, an extension to Flash (usually installed with shareware screensavers)
qttask.exe - quicktime updater
vsmon.exe - zone alarm
VetMsgNt.exe - InoculateIT AntiVirus
aim.exe - AOL instant messenger
compaq-rba.exe - "helper" file sends support info to Compaq
avgserv.exe - AVG AntiVirus
Vettray.exe - eTrust EZ Antivirus service
LexPPS.exe - Lexmark printer port server, unless you share your printer over a network, use the Search command on the Start menu and rename LEXPPS.EXE to LEXPPS.EXE.OLD
LexBces.exe - software that works with Lexmark printers with internal NIC cards
Ybrowser.exe - yahoo service
hpztsb07.exe - hp deskjet utility
avgcc32.exe - AVG service
igfxtray.exe - Intel graphics utility
tfswctrl.exe - necessary for DLA (cdrw software)
msmsgs.exe - MS messenger service
ipmon32.exe - Verizon diagnostic monitoring utility
WKUfind.exe - updater service for MS Picture-It!
MotiveSB.exe - tech support utility (used by hp/AT&T/ibm etc)
ycommon.exe - yahoo service
ybrwicon.exe - yahoo service
IPclient.exe - Verizon diagnostic monitoring utility
cfd.exe - Motive software - allows software updates/downloads for remote tech support
zlclient.exe - ZoneLabs firewall
hkcmd.exe - service installed with various usb keyboards with extra buttons
hpsysdr.exe - hp/compaq related service
Weather.exe - spyware related to Weatherbug

in other words, I see a little spyware, a little garbage, some conflicts (looks like you have software for numerous printers and ISP's) not a big problem, except for what looks like multiple antivirus programs installed - that can potentially be a big problem you should uninstall ONE of them

what I DONT see are signs of a virus, that doesn't mean that you don't have one, just that I can't see it.


so what does this all mean and what should you do?

well, I would try to do a System Restore from safe mode, go back to a point that you remember things were working OK, if that fails you could try run HijackThis to see if it finds anything else, or backup all your data and reinstall Windows.

:eek:Wow Thanks! I ran that antivirus that you suggested earlier and it found 3 of them (only 3) LOL.
I only have 1 printer installed, what are the names of the other 'printers' from that list? so I can remove them. I will remove AVG since is the least I use for protection.

there should be software for a Lexmark and a HP Deskjet in there - remove them from the Add/Remove Programs in the Control Panel....

as for the "tech support" software and the "updaters" I would look for them in Add/Remove as well, and then remove any leftovers from the MSCONFIG System Configuration utility

Originally posted by Unmarried*happy
:eek:Wow Thanks! I ran that antivirus that you suggested earlier and it found 3 of them (only 3) LOL.
I only have 1 printer installed, what are the names of the other 'printers' from that list? so I can remove them. I will remove AVG since is the least I use for protection. ahh - I didn't realize that you had found anything with the antivirus scan, OK then

as for the windows update service....

I tried removing the AVG and get an error msg about a 16-bit an MS-Dos configuration so it won't let me remove it and the Windows Updates won't install either. I keep getting the msg that my ACTIVE X controls don't allow them:(

This behavior will occur if the Cryptographic Services is Disabled or if there is
log file or database corruption in the %Systemroot%\System32\Catroot2 folder.

To fix this problem:

01. go to Control Panel / Administrative Tools / Services.

02. Right-click Cryptographic Services and press Properties.

03. Set Startup type to Automatic.

04. Press the Apply button.

05. Press the Start button.

06. Press OK.

07. Try to perform a Windows Update - if it works, don't do the rest of this:

close IE, then

08. go to the Run command on the start menu, type in CMD

09. Type the following commands:

net stop cryptsvc
ren %systemroot%\system32\catroot2 oldcatroot2
net start cryptsvc

10. Close the command prompt and try Windows Update again

if you are still having Windows update problems, try the info on this page:

http://support.microsoft.com/kb/822798

Originally posted by Unmarried*happy
I tried removing the AVG and get an error msg about a 16-bit an MS-Dos configuration so it won't let me remove it and the Windows Updates won't install either. I keep getting the msg that my ACTIVE X controls don't allow them:( what are the EXACT error messages?

Originally posted by robyrob
what are the EXACT error messages?

C:\windows/SYSTEM32\AutoExec.NT
The systemfile is not suitable for running MS-DOS and Microsoft Windows Applications. Choose "Close" to terminate this application.

Originally posted by Unmarried*happy
C:\windows/SYSTEM32\AutoExec.NT
The systemfile is not suitable for running MS-DOS and Microsoft Windows Applications. Choose "Close" to terminate this application. seems to be an indication that the autoexec.nt file is corrupted, and needs to be replaced with an original copy from your Windows XP cd.
Go to a command prompt (Start/Run/cmd), making sure your cd is in the drive.
Then type in:
expand D:\i386\autoexec.nt c:\windows\system32\autoexec.net
(assuming your cd drive is "D:", if not then subsitute with the correct drive letter)
Press enter after you type in the command and you should see the file being copied.
If it does not copy, try this command instead:
expand c:\windows\repair\autoexec.nt c:\windows\system32\autoexec.nt

*edit: found the MSKB instructions:
http://support.microsoft.com/default.aspx?scid=kb;en-us;324767

Originally posted by robyrob
[B]seems to be an indication that the autoexec.nt file is corrupted, and needs to be replaced with an original copy from your Windows XP cd.



Which CD? All I have are the System Recovery ones

Originally posted by Unmarried*happy
Which CD? All I have are the System Recovery ones ahhh - I should have clued in that you have either an hp or a Compaq system don't you? well those recovery discs arent going to help - you can try:

expand c:\windows\repair\autoexec.nt c:\windows\system32\autoexec.nt

at a command prompt (this tries to copy a fresh copy from your Windows folder, so it doesn't need the cd), or

you could borrow a windows XP cd from someone (it MUST be the same version - Home or Pro)

Originally posted by robyrob
ahhh - I should have clued in that you have either an hp or a Compaq system don't you? well those recovery discs arent going to help - you can try:

expand c:\windows\repair\autoexec.nt c:\windows\system32\autoexec.nt

at a command prompt (this tries to copy a fresh copy from your Windows folder, so it doesn't need the cd), or

you could borrow a windows XP cd from someone (it MUST be the same version - Home or Pro)

That removed AVG!!:happyface I emailed Microsoft earlier to see what they can do about the updates. THANKS! :hug:

Originally posted by Unmarried*happy
That removed AVG!!:happyface I emailed Microsoft earlier to see what they can do about the updates. THANKS! :hug: :)

don't hold your breath waiting for a response from MS - they can be SLOOOOOWWW if you aren't PAYING for support.

try following the steps on this page:

http://support.microsoft.com/kb/822798

Originally posted by robyrob
:)

don't hold your breath waiting for a response from MS - they can be SLOOOOOWWW if you aren't PAYING for support.

try following the steps on this page:

http://support.microsoft.com/kb/822798

I searched for the 'Certificates' and one of the GTE Cyber Root certs is expired.
Seems like Microsoft needs to hire my computer as a guine apig for their experiments since they haven't found a solution for my problem yet