[puddleduck]

Hello,
lately my computer has been freezing and now i have gotten an error saying "drwatson post mortem debugger has encountered a problem and needs to close" I have run spybot, adaware, my virus scanner avg and malaware and i am still having this problem. Do you have any suggestions of what this could be? Or what scans I can run to find out?

[Advertisements]

Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.
Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes

WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply

Download and install EVEREST
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"

[rshaffer61]

Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.
Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes

WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply

Download and install EVEREST
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"

[puddleduck]

This might be a really stupid question, but where is your signature?? I can't find the place to download whocrashed, sorry!

[rshaffer61]

see all the multi colored type below this message?
One of them says
WhoCrashed
Those are links to the files they name.
Right below my GeeksToGo blue signature tag.

[puddleduck]

Okay, thank you for helping me find whocrashed, the signature didn't show up on my computer with your first message but it did with the second.
Here is the summary from whocrashed:

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.


On Thu 8/7/2008 6:57:30 PM your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x100000BE (0xF7115976, 0x806F121, 0xF8A65C7C, 0xB)
Error: Unknown
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Likely the culprit is another driver on your system which cannot be identified.


and here is the one from Everest:
--------[ EVEREST Home Edition © 2003-2005 Lavalys, Inc. ]------------------------------------------------------------

Version EVEREST v2.20.405
Homepage http://www.lavalys.com/
Report Type Quick Report
Computer LAPTOP (gem)
Generator Gem
Operating System Microsoft Windows XP Home Edition 5.1.2600 (WinXP Retail)
Date 2009-07-28
Time 16:31


--------[ Summary ]-----------------------------------------------------------------------------------------------------

Computer:
Operating System Microsoft Windows XP Home Edition
OS Service Pack Service Pack 3
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name LAPTOP (gems computer)
User Name Gem

Motherboard:
CPU Type Mobile Intel Pentium M 725, 1400 MHz (14 x 100)
Motherboard Name Dell Inspiron 600m
Motherboard Chipset Intel Odem i855PM
System Memory 512 MB (PC2700 DDR SDRAM)
BIOS Type Phoenix (08/26/04)
Communication Port Communications Port (COM1)
Communication Port ECP Printer Port (LPT1)

Display:
Video Adapter MOBILITY RADEON 9000 (64 MB)
Video Adapter MOBILITY RADEON 9000 (64 MB)
3D Accelerator ATI Mobility Radeon 9000 (M9)

Multimedia:
Audio Adapter Intel 82801DBM ICH4-M - AC'97 Audio Controller [A-1]

Storage:
IDE Controller Intel® 82801DBM Ultra ATA Storage Controller - 24CA
Disk Drive FUJITSU MHT2040AH (40 GB, 5400 RPM, Ultra-ATA/100)
Optical Drive HL-DT-ST RW/DVD GCC-4243N (DVD:8x, CD:24x/24x/24x DVD-ROM/CD-RW)
SMART Hard Disks Status OK

Partitions:
C: (NTFS) 34506 MB (19166 MB free)

Input:
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse Alps Touch Pad

Network:
Network Adapter Intel® PRO/Wireless 2200BG Network Connection (192.168.0.100)
Modem Conexant D480 MDC V.9x Modem

Peripherals:
Printer \\Canon i860
Printer Auto Canon i860
Printer Fax
Printer Lexmark 2500 Series
Printer LexmarkFax
Printer Send To OneNote 2007
USB1 Controller Intel 82801DBM ICH4-M - USB Controller [A-1]
USB1 Controller Intel 82801DBM ICH4-M - USB Controller [A-1]
USB1 Controller Intel 82801DBM ICH4-M - USB Controller [A-1]
USB2 Controller Intel 82801DBM ICH4-M - Enhanced USB2 Controller [A-1]
USB Device USB Audio Device
USB Device USB Composite Device
USB Device USB(VGA) Camera #2
Battery Microsoft AC Adapter
Battery Microsoft ACPI-Compliant Control Method Battery
Battery Microsoft ACPI-Compliant Control Method Battery

[rshaffer61]

First issue I see is
System Memory 512 MB
This is minimum for XP to run. I suggest you at least double this to 1 gig of memory.

Go HERE and run the Crucial online scanner.
This will give you the exact memory configuration for your system. You do not have to buy the memory from there, but write down the information and if you need assistance in purchasing the upgrade memory GTG can assist with suggestions also.


Download Autoruns from the link in my signature below:

1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As.
6: Save AutoRuns.txt file to know location.
7: Attach to your next reply.

[puddleduck]

Thank you for your help again,
here is my autoruns file

Attached Files

•  AutoRuns.txt   106.88KB   79 downloads

[rshaffer61]

Open Autoruns, click on "Logon" tab, and UN-check:

+ Adobe Reader Speed Launcher
+ QuickTime Task
+ SunJavaUpdateSched
+ TkBellExe
+ CUCore Agent
+ msnmsgr
+ Shockwave Updater


The next entry has to be disabled manually. It is not needd unless you are using multi language on your keyboard.

To turn off just ctfmon.exe go to:


Control Panel then to Regional and Language Options

Click on the Languages Tab then click the Details button

Click on the Advanced tab

Check the box that says Turn off advanced text services option

Click A and then OK



When done restart computer and then:


Download Temp File Cleaner (TFC)
Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.



Download Auslogics Defrag from the link in my signature below. Auslogics Defrag in my opinion is better because:

It does a more comprehensive job at Defragging
It will actually show you what it is doing
At the end of working it will show you how much speed you picked up
You can view a online log of the files that Auslogics defragged

[puddleduck]

I have done the autoruns, the temp file cleaner, and the defrag. Is there anything else I need to do?

[rshaffer61]

Hows the system running now?

[puddleduck]

It works fine for about 10 mins or so. Then the problems I have open freeze and I can't move between them and when I "ctrl, alt, del" it comes up with "not responding" I close those processes and when i open them up again, the computer is sluggish and freezes on and off. The only way I can fix it is to restart the computer.

[rshaffer61]

Well we need to now make sure that there is no infection. Everything we have done to this point should have helped out.
At this point I believe you have some malicious software running.
The only way to make sure is to let the guys specially trained for that take a look at your system.
With that said :

I suggest you go to the Malware Removal and Spyware Removal Forum and run all the steps located in the START HERE. These self-help tools will help you clean up 70% of problems on your own. If you are still having problems after doing the steps, then please post the reguested logs in THAT forum. If you are unable to run any of the tools then start a new topic in the malware forum and put this in the subject line...I am unable to run any malware tools

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

Add a link to this topic so that malware tech can see what steps have been taken here

[puddleduck]

Hey,
I did the scans for malware and posted it to the forum you told me to, its now been a week and no replies...any suggestions?
thank you

[rshaffer61]

Go to the Waiting Room and start a new topic there.
In that topic post a link to your Malware topic with the date of the original post.