[pomognetemi]

This morning it couldn't start and I pressed 3 times in a row the re-start button. And it did.

The following is a block of 4 erorr messages (ID 35), which appeared every day (44 times in total) for the last 7 days
Event xmlns="http://schemas.micro.../events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>35</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-11-02T22:59:12.973628900Z" />
<EventRecordID>17</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>37L4247E29-32</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="Group">0</Data>
<Data Name="Number">0</Data>
</EventData>
</Event>
==================================================================================
Event xmlns="http://schemas.micro.../events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>35</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-11-02T22:59:12.989228900Z" />
<EventRecordID>19</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>37L4247E29-32</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="Group">0</Data>
<Data Name="Number">2</Data>
</EventData>
</Event>
==================================================================================
Event xmlns="http://schemas.micro.../events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>35</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-11-02T22:59:12.989228900Z" />
<EventRecordID>19</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>37L4247E29-32</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="Group">0</Data>
<Data Name="Number">2</Data>
</EventData>
</Event>
==================================================================================
Event xmlns="http://schemas.micro.../events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>35</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-11-02T22:59:12.989228900Z" />
<EventRecordID>19</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>37L4247E29-32</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="Group">0</Data>
<Data Name="Number">2</Data>
</EventData>
</Event>

to be continued..

Edited by pomognetemi, 09 November 2013 - 07:25 PM.

[Advertisements]

Log Name: System
Source: Disk
Date: 4/11/2013 6:09:54 a.m.
Event ID: 7
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The device, \Device\Harddisk0\DR0, has a bad block.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Disk" />
<EventID Qualifiers="49156">7</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-03T17:09:54.995622000Z" />
<EventRecordID>1402</EventRecordID>
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk0\DR0</Data>
<Binary>030080000100000000000000070004C0000100009C0000C000000000000000000050
E50100000000AE03000000000000FFFFFFFF01000000580000840200000000200A12400320400000
00003C000000000000000000000068AF210580FAFFFF0000000000000000103EA00380FAFFFF607C
8F0480FAFFFFA8F200000000000028000000F2A800000800000000000000F00003000000000B0000
0000000000000000000000000000</Binary>
</EventData>
</Event>
=================================================
Log Name: System
Source: Ntfs
Date: 4/11/2013 6:09:58 a.m.
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \\?\Volume{60ac3022-4412-11e3-aa2f-806e6f6e6963}.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-03T17:09:58.131227500Z" />
<EventRecordID>1404</EventRecordID>
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\\?\Volume{60ac3022-4412-11e3-aa2f-806e6f6e6963}</Data>
<Binary>03000C000200380002000000370004C0000000000000000000000
0000000000000000000000000009F340C00FFFFFFFFFFFFFFFF</Binary>
</EventData>
</Event>
===========================================================
Log Name: System
Source: Disk
Date: 4/11/2013 10:43:26 a.m.
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The driver detected a controller error on \Device\Harddisk5\DR5.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Disk" />
<EventID Qualifiers="49156">11</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-03T21:43:26.528163800Z" />
<EventRecordID>1852</EventRecordID>
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk5\DR5</Data>
<Binary>0E02800001000000000000000B0004C003010000000000000000000000082D0000000000
000000001C11100000000000FFFFFFFF0600000058000000000000000000061208000010000000003C00
0000000000000000000080816A0780FAFFFF0000000000000000C07AD90680FAFFFF0000000000000000
000000000000000000000000000000000000000000000000000000000000000000000000000000000000
000000000000</Binary>
</EventData>
</Event>

to be continued

Edited by pomognetemi, 09 November 2013 - 11:10 AM.

[pomognetemi]

Log Name: System
Source: Disk
Date: 4/11/2013 6:09:54 a.m.
Event ID: 7
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The device, \Device\Harddisk0\DR0, has a bad block.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Disk" />
<EventID Qualifiers="49156">7</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-03T17:09:54.995622000Z" />
<EventRecordID>1402</EventRecordID>
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk0\DR0</Data>
<Binary>030080000100000000000000070004C0000100009C0000C000000000000000000050
E50100000000AE03000000000000FFFFFFFF01000000580000840200000000200A12400320400000
00003C000000000000000000000068AF210580FAFFFF0000000000000000103EA00380FAFFFF607C
8F0480FAFFFFA8F200000000000028000000F2A800000800000000000000F00003000000000B0000
0000000000000000000000000000</Binary>
</EventData>
</Event>
=================================================
Log Name: System
Source: Ntfs
Date: 4/11/2013 6:09:58 a.m.
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \\?\Volume{60ac3022-4412-11e3-aa2f-806e6f6e6963}.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-03T17:09:58.131227500Z" />
<EventRecordID>1404</EventRecordID>
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\\?\Volume{60ac3022-4412-11e3-aa2f-806e6f6e6963}</Data>
<Binary>03000C000200380002000000370004C0000000000000000000000
0000000000000000000000000009F340C00FFFFFFFFFFFFFFFF</Binary>
</EventData>
</Event>
===========================================================
Log Name: System
Source: Disk
Date: 4/11/2013 10:43:26 a.m.
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The driver detected a controller error on \Device\Harddisk5\DR5.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Disk" />
<EventID Qualifiers="49156">11</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-11-03T21:43:26.528163800Z" />
<EventRecordID>1852</EventRecordID>
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk5\DR5</Data>
<Binary>0E02800001000000000000000B0004C003010000000000000000000000082D0000000000
000000001C11100000000000FFFFFFFF0600000058000000000000000000061208000010000000003C00
0000000000000000000080816A0780FAFFFF0000000000000000C07AD90680FAFFFF0000000000000000
000000000000000000000000000000000000000000000000000000000000000000000000000000000000
000000000000</Binary>
</EventData>
</Event>

to be continued

Edited by pomognetemi, 09 November 2013 - 11:10 AM.

[phillpower2]

Hi pomognetemi

A power to the HDD problem could be the cause so can you first of all create a stable power plan for the computer, a guide to help with this is available from Here

Once you have done this we will take a look at your voltages.

[pomognetemi]

Log Name: System
Source: Service Control Manager
Date: 4/11/2013 2:48:49 p.m.
Event ID: 7023
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SETH-PC
Description:
The description for Event ID 7023 from source Service Control Manager cannot be found.
Either the component that raises this event is not installed on your local computer or
the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Windows Modules Installer
%%16405

The resource loader failed to find MUI file

Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}"
EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7023</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2013-11-04T01:48:49.916761200Z" />
<EventRecordID>2455</EventRecordID>
<Correlation />
<Execution ProcessID="520" ThreadID="640" />
<Channel>System</Channel>
<Computer>SETH-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Modules Installer</Data>
<Data Name="param2">%%16405</Data>
</EventData>
</Event>
=================================================================================

Probably these are all.

The bad sectors ones are repeated.

Edited by pomognetemi, 10 November 2013 - 03:36 AM.

[pomognetemi]

Hi Phill,

My Power Plan is Balanced now. This is the recommended one.

Turn off the display = 10 mins
Put to sleep = 30 mins

Could you, please tell me if I am to leave it Balanced, or change it to Power Saver, High Performance or Custom?

I may leave this for Sunday. It's 12.30 here.

Thank you, Phill.

Edited by pomognetemi, 09 November 2013 - 05:32 AM.

[phillpower2]

Thanks for the update pomognetemi

Balanced would be the most stable for you.

No problem leaving it until Sunday.

On your return please do the following for us;

Download Speedfan and install it. Once it's installed, run the program and post here the information it shows.
The information I want you to post is the stuff that is circled in the example picture I have attached.
If you are running on a vista machine, please go to where you installed the program and run the program as administrator.


(this is a screenshot from a vista machine)

To capture and post a screenshot;

Click on the ALT key + PRT SCR key..its on the top row..right hand side..now click on start...all programs...accessories...paint....left click in the white area ...press CTRL + V...click on file...click on save...save it to your desktop...name it something related to the screen your capturing... BE SURE TO SAVE IT AS A .JPG ...otherwise it may be to big to upload... then after typing in any response you have... click on browse...desktop...find the screenshot..select it and click on the upload button...then on the lower left...after it says upload successful...click on add reply like you normally would.

Depending on the results we may need to run further software for comparison http://www.cpuid.com.../hwmonitor.html

Screenshot instructions are provided to assist those that may read this topic but are not yet aware of the “how to”.

[pomognetemi]

Good morning Phill,

I hope you're having a nice weekend.

Now that the attention is on power issues, and you think there is something wrong there (you are right!)
I realise that at least for the last 3 years my computer has never gone to sleep, the display has never turned
off, the hard disk has never turned off also - its noise and that of the fan is always very high, even if I didn't do
anything on the computer for hours. The settings are all there, but something prevents their application.

My screensaver doesn't work as well, and if I want to leave the computer on for some time I always turn the
monitor off from the button. That was not always the case.

I don't know the reasons for this situation - I went through a lot of Q/A online and think that maybe in my
case the wireless mouse and keyboard are creating the problems. I totally removed the wireless keyboard,
and will put an ordinary mouse as well. I want to see if this will change the situation - and then we can go
through more complex tests. I will do this tests anyway, I just want to solve the power issues first and then
go on.

What would you say, Phill?
As always grateful for your help.

[phillpower2]

Good evening pomognetemi

Feet up working online weekend for me which is just how I like it thanks

Good idea to try a wired keyboard and mouse to at least rule the wireless ones in or out as the cause

I realise it is getting late there in NZ so no rush reply when you are able to.

You are most welcome BTW

[pomognetemi]

Hi Phill,

This is a loooong reply.

First of all, If this is important for you I am listing my power plan settings as they are now.

All these are the default settings. I only changed "Allow hybrid sleep" from "on" (by default) to "off",
because this was the recommendation on the link you asked me to look at.

Balanced (recommended) Power plan
Settings:
Turn off hard disk after 20 mins
Internet Explorer : JavaScript Timer Frequency: Maximum Performance
Desktop background sttings: Slide show: Available
Wireless Adapter Settings: Power Saving Mode: MaximumPerformance
Sleep:
Sleep after 30 mins
Allow hybrid sleep: Off
Hibernate after: Never
Allow wake timers: Enable
USB settings: USB selective suspend setting: Enabled
Power buttons and lid: Power button action: Shut down
PCI Express: Link State Power Management: Modarate power savings
Processor power management:
Minimum processor state: 5%
System cooling policy : Active
Maximum processor state: 100%
Turn off display after 10 mins
Multimedia settings:
When sharing media: Allow the computer to sleep
When playing video: Optimize video quality

____________________________________________________________

As I mentioned in a previous post my screen saver was not working, and neither the display nor the hard disk was turning off,
and the computer wasn't going into a sleep state.
Today I removed the wireless mouse as well, connected another one to the PS/2 port and the situation changed.
The screen saver works normally. The display and the computer turn off on time.
I can't tell if the hard drive turns off, because the noise of the computer before and after the 20th minute seems
pretty much the same. I don't know what could be the indication, that the HD is off.
The only problem is that I have to hit the power button on the front of the PC to bring the computer out of sleep mode.

________________________________________________________

The computer itself keeps behaving the old way - today I turned it on 6 times, 4 times it started OK, the other 2 - it couldn't.
The Events Viewer today is giving the same repeated errors: eventID 35(the block of 4 errors) and "The device, \Device\Harddisk0\DR0,
has a bad block."
Shall I try to repair the bad sectors with DD Diagnostics?

___________________________________________________________

Added later: About downloading Speedfan

[To make a long story short: While trying to download Speedfan, I downloaded by mistake something else. So I decided to download
it from a different website and somehow ended up with a Trojan Downloader. I found it by chance - just checked the error events and saw
this warning:
Microsoft Antimalware has detected malware or other potentially unwanted software.
For more information please see the following:
http://go.microsoft....atid=2147684061
Name: TrojanDownloader:Win32/Brantall.D
ID: 2147684061
Severity: Severe
Category: Trojan Downloader
Path: file:_C:\Users\BUBETO\AppData\Local\Temp\udDownload.tmp
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
User: SETH-PC\BUBETO
Process Name: D:\SoftonicDownloader_for_speedfan.exe
Signature Version: AV: 1.161.1829.0, AS: 1.161.1829.0, NIS: 109.17.0.0
Engine Version: AM: 1.1.10003.0, NIS: 2.1.10003.0

I restored the system to a previous point. Then I ran Microsoft Security Essentials, because wasn't sure if restoring the system to
a previous point is enough to get rid of this. I think even after system restore some files remain on the computer.

Later on I downloaded again Speedfan without problems.
_____________________________________________________________

After I restored the system I did one more test of the hard drive and here is the result.

Today I also have a new kind of Error message - Event ID=12. Description:
"The platform firmware has corrupted memory across the previous system power transition.
Please check for updated firmware for your system."

Well, that's it. I tried to be as detailed as possible to help you get a clearer picture of what's happening.

This thread starts looking as a thesis to me...It takes so much time to write all this...
I am sorry, Phill, it's so long and I am taking so much of your time...

Attached Thumbnails

• 
• 

Edited by pomognetemi, 12 November 2013 - 03:28 AM.

[phillpower2]

Hello pomognetemi

While you are troubleshooting it is a good idea to ensure that your display is set so that it does not switch off so that you do not miss any on screen messages.

You can check if the HDD is idle by watching it`s activity LED to see if it blinks, if it doesn`t it is off.

As you have mentioned possible malware infection can I ask you to refer to the GTG malware redirection information below;

I suspect that you have some malware on your computer causing issues that we are not able to solve through means we can use here in the Tech Forums. I suggest you read the 'Start Here' topic found here. With these self-help tools you have a high chance of fixing the problems on your own. If you are still having problems after following Step 3 of the guide, continue with Step 4 and 5 and post in the Malware Forum. If you are unable to run any programs, Please create a topic stating what you have tried so far and that you are unable to run any programs. Also, Please do NOT post the logs in this thread.

If you are still having issues after the malware expert gives you a clean bill of health, Please return to THIS thread and we will pursue other options to help you solve your current problem(s).

[pomognetemi]

Hello, Phillpower,

Thank you for your reply.
I will follow it.

I wanted to check if all power settings work properly and report back to you, that is why I set the display to turn off as well.
But now knowing it works OK, I will change the setting.

The LED does not stop blinking.

I have my computer's motherboard manual and already checked about the LED. It says;

The LED is on when the system is operating.
The LED keeps blinking when the system is in S1 Sleep state.
LED is off when the system is in S3/S4 sleep state or powered off(S5).

Obviously the sleep state my system goes into is S1 .

If because of the hard disk you want me to change the power settings in any way,
I can do it - that is why I took the time to list them all, as they are set now.

Edited by pomognetemi, 16 November 2013 - 07:43 AM.

[phillpower2]

Hello pomognetemi

Thanks for the additional HDD information

I will look out for an update from you when it is confirmed that your computer is clear off malware - by the staff on the GTG Malware Forums, if you need to start a topic there.

[pomognetemi]

Hi phillpower

I will start a topic on the other forum, but could you please tell me if I have to conclude this thread now?
I am not sure what are the rules to be observed here.

Thanks again for all your help so far.

Edited by pomognetemi, 12 November 2013 - 05:53 PM.

[phillpower2]

Hello pomognetemi

No need to conclude this thread but thank you for asking, should you need to return to this topic you only need to provide an update here and I will respond.

Good luck

[pomognetemi]

Thank you, Phill.
With my level of computer understanding and knowledge in addition to other people's help I need all the luck I can get
I am learning, though.

In case this can help someone else with a similar problem:

Further to my post #85:
"The only problem is that I have to hit the power button on the front of the PC to bring the computer out of sleep mode.'

This is the solution I found:

In BIOS> Power Management Setup> Power On By Mouse

"Power on by mouse" allows the system to be turned on by a PS/2 mouse wake-up event.
Disabled - Disables the function (Default)
Double Click - Double click on the left button on the PS/2 mouse to turn on the system.
[Note: To use this function, you need an ATX power supply providing at least 1A on the SVSB lead)

I changed the setting to double click and it works.

Edited by pomognetemi, 13 November 2013 - 06:45 PM.