Plz Help!

[Far+Beyond+Entoxicated]

i didnt find those numbers and the name of my mother board is ASUS A7V8X-X

X series

also i found these things in the microsoft error report

C:\DOCUME~1\richard\LOCALS~1\Temp\WERce57.dir00\Mini082205-02.dmp

C:\DOCUME~1\richard\LOCALS~1\Temp\WERce57.dir00\sysdata.xml

BCCode : 100000d1 BCP1 : F8267448 BCP2 : 00000002 BCP3 : 00000000

BCP4 : F7FEC719 OSVer : 5_1_2600 SP : 2_0 Product : 768_1

what do you make of it?

oh and i got another wc3 fatal error

Program: c:\program files\warcraft iii\war3.exe

0xC000001D (ILLEGAL_INSTRUCTION) at 001B:6F0C7E60

Edited August 22, 2005 by Far+Beyond+Entoxicated

[Far+Beyond+Entoxicated]

good news! i think i may have issolated the prblem down more , warcraft seems to be the only game with the fatal error problem cuz i got doom 3 and gunz online on my computer and they run fine , the only other problem on my computer is the over heating problem and know its over heating cuz my computer has down this before when 2 of my fans kicked out ,but with warcraft 3 now its not letting me even go on battle.net now cuz it wont let me update saying it couldent be properly uploaded , not only that when i dl the update my comp does the fatal error jazz and comp restart but just a though before it said it was a driver problem, could it be that one of the drivers is connected with the cooling system or something like that and maybe that it has the problem?

[Parrotgeek7]

I still agree with pete, although your system may meet the bare minimum requirements here are the reccomended reqs.

Recommended system requirements:

- 512 MB of RAM

- 2.0 Ghz CPU

- 128 MB 3D video card

Does your system meet or exceed those? i kow your cpu doesn't, what about the rest?

[Schusterjo]

I still agree with pete, although your system may meet the bare minimum requirements here are the reccomended reqs.

Recommended system requirements:

- 512 MB of RAM

- 2.0 Ghz CPU

- 128 MB 3D video card

Does your system meet or exceed those? i kow your cpu doesn't, what about the rest?

<{POST_SNAPBACK}>

LOL that reminds me of the old days where i used to play this one game minimized because my system did not meet the min.. as soon as i would blow it up to full screen it would crash.. Heck i wish i could remember that games name.. was to cheap to upgrade back then

[Far+Beyond+Entoxicated]

actually my comp is way over wc recomended requirements but w/e anyways i have made yet another discovery , while using a trial of registry fix ver 3 i found out some of my registries were causing these crashes but there is one registry it will not fix without me buying the full version ,the registry problem is in the web browser folder which is in the internet explorer folder , so does anyone know a good registry fixing program thats free and will actually fix registries without a buy it then we'll get off our ass and help you scheme , or if their is know programs does any body know how i could fix the registries manually of course if their is no programs

[Schusterjo]

be very suspicious and careful with reg fixers

[Far+Beyond+Entoxicated]

if theres no good reg fixer than can anyone tell me how to do it manually?

[Parrotgeek7]

actually my comp is way over wc recomended requirements

No its not, a 1.3 Duron isn't even close to a 2 G cpu., but if you want to believe thats not one of your issues, then thatsfine with me.

Whats the registry key/entry it has identified as being bad?

[Far+Beyond+Entoxicated]

not gonna argue even tho it says 400 MB but w/e right anyways ya i got all the stuff i could get down about the problem registry

value name:

{2318C2B1-4965-11D4-9B18-009027A5CD4F}

Type:

REG_BINARY

Value data:

0000 B1 C2 18 23 65 49 D4 11

0008 9B 18 00 90 27 A5 CD 4F

0010

[Pete_C]

not gonna argue even tho it says 400 MB but w/e right anyways ya i got all the stuff i could get down about the problem registry

value name:

{2318C2B1-4965-11D4-9B18-009027A5CD4F}

Type:

REG_BINARY

Value data:

0000 B1 C2 18 23 65 49 D4 11

0008 9B 18 00 90 27 A5 CD 4F

0010

<{POST_SNAPBACK}>

That is the google toolbar

http://castlecops.com/tk709-googletoolbar_...deleon_dll.html

I think that this board chops long URLS

castlecops.com/tk709-googletoolbar_dll_googletoolbar_dll_googlenav_dll_googletoolbar_en_big_dll_googl

etoolbar_en_deleon_dll.html

Copy and paste YOu need to add the Http:// but no www

Uninstall it.

Edited August 23, 2005 by Pete_C

[Far+Beyond+Entoxicated]

the link isnt working =(

[Pete_C]

the link isnt working =(

<{POST_SNAPBACK}>

The board chops the url

Just put the clsid into the search at google and it is the first hit.

Try this one

http://www.spywareinfo.com/toolbars/

Edited August 23, 2005 by Pete_C

[Far+Beyond+Entoxicated]

so your saying use hijack this , ok but can i give you a update log since ive deleted some things , for you to look at cuz i wouldent know where to begin with getting rid of the google registry

[martymas]

me tinks off the top of me head this is power supply related..underpowered.

<{POST_SNAPBACK}>

this is not related to the Q

but aimed at bearskin

in your pic i dont see the word HOW

tho in modern day

native american language

greetings and salutation

marty

i see pete _c is posting and that must be good for the board

marty

[Far+Beyond+Entoxicated]

ima gonna post a new log just for if anyone sees anything that could harm my comp or the google thing well you know the rest lol

Logfile of HijackThis v1.99.1

Scan saved at 4:03:26 PM, on 8/23/2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Analog Devices\SoundMAX\SMTray.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\PROGRA~1\Yahoo!\YOP\yop.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe

C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\Messenger\msmsgs.exe

C:\PROGRA~1\Live365\Radio365\Radio365TrayAgent.exe

C:\Program Files\WinZip\WZQKPICK.EXE

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\PROGRA~1\Yahoo!\browser\ycommon.exe

C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe

C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE

C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe

C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\wdfmgr.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\richard\My Documents\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rogers.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ca.red.clientapps.yahoo.com/customi.../search/ie.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://rogers.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.accoona.com/search?q=%s

O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll

O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O4 - HKLM\..\Run: [smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"

O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe

O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE

O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe" -quiet

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [Radio365Agent] C:\PROGRA~1\Live365\Radio365\Radio365TrayAgent.exe

O4 - HKCU\..\Run: [sHS] "C:\Program Files\Rogers\SelfHealing\SHS.exe" /background

O4 - HKCU\..\Run: [update Manager] "C:\Program Files\Rogers\Update Manager\UpdateManager.exe" /background

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O15 - Trusted Zone: http://awbeta.net-nucleus.com (HKLM)

O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

O16 - DPF: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} (WXcom Class) - http://us.dl1.yimg.com/download.yahoo.com/...ntr_current.cab

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {82F2D6B2-6C58-4404-A930-9DB0FD90D4B1} (Driver_Detective_v43_Non_Member.DD_v43) - http://www.drivershq.com/cab/prod/Driver_D..._Non_Member.CAB

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx2.6.1.7_en_dl.cab

O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab

O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{FFC04BAC-15B3-46DE-837E-13EACC88698E}: NameServer = 24.153.22.195,24.153.22.67

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe

O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE

O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

[Far+Beyond+Entoxicated]

Ok i deleted the registry with google , i made a restore point first of course , the reg fix thingy says tis gone but i seem to only have problem with warcraft 3 and my computer over heating , whats wierd tho is that doom 3 works fine for hours but wc3 which came out ebfore doom3 can barely go 3 seconds without causing the computer to restart , what do yuo guys think?

[Pete_C]

Ok i deleted the registry with google , i made a restore point first of course , the reg fix thingy says tis gone but i seem to only have problem with warcraft 3 and my computer over heating , whats wierd tho is that doom 3 works fine for hours but wc3 which came out ebfore doom3 can barely go 3 seconds without causing the computer to restart , what do yuo guys think?

<{POST_SNAPBACK}>

Ah, oh well. I thought you were having an issue related to it. That was why I gave the link.

You really should post this in the Malware section.

You have messenger plus which installs coolwebsearch trojans

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

Uninstall it with add/ remove programs and then have hijackthis fix that entry.

Looks like you are not infected, but it will infect you again if you leave it.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ca.red.clientapps.yahoo.com/customi.../search/ie.html

Redclientapps, is partnered with claria , makers of gator and gain. No need to publicize to advertisers everything you search for. Have Hijackthis remove this entry.

[Far+Beyond+Entoxicated]

theres one that says

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

it says fault so i think it might be an error or something cuz i remeber leo mentioning something about kernel's if it isnt tell me cuz i havent used anything on it yet and there was no messner plus reg to be found only normal msn

[Far+Beyond+Entoxicated]

ok ive really to come to the last conclusion the only problems with my computer seem to occur when i play gunz online and warcraft 3 and dont dare say its cuz my cpu or stuff cant play wc cuz im playing doom 3 with decent speed on my computer and prior i played warcraft 3 for 2 or 3 years so explain that, ok im actting like a dick there but im getting the point across thats the last thing on the list it could be unless cpu's crap out over 2 or 3 years , with warcraft 3 i cant even play a normal campaign game for more than 2 minutes without my computer restarting , it only restarts now when i play warcraft 3 or the odd time gunz , warcraft 3 also gets constant fatal errors , gunz just lags like a bitch and after a few rounds it rarely restarts the computer. i have constantly uninstalled warcraft 3 , it mustve been like 6 times already now. can you think of anythings cuz this seems to be the source of my problems

[Parrotgeek7]

Besides cleaning with canned air, did you do anything else to remedy your heat problem?

[Far+Beyond+Entoxicated]

i dont think its a heat problem now cuz if it was it would be crashing all the time to doom 3 cuz think about wouldent doom3 be the one pushing it to that point not warcraft 3 ? i think its more along the lines of something causing my computer to crash , but still to answer your question no

[Pete_C]

theres one that says

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

it says fault so i think it might be an error or something cuz i remeber leo mentioning something about kernel's if it isnt tell me cuz i havent used anything on it yet and there was no messner plus reg to be found only normal msn

<{POST_SNAPBACK}>

http://startup.iamnotageek.com/srch-kernelfaultcheck.html

Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out

[Far+Beyond+Entoxicated]

that got rid of the kernel but it didnt solve my overall problem , i know this is getting old and annyoing to you and same with me but dio you know anything else i could try?

[Far+Beyond+Entoxicated]

i got some interesting news it seems that every new game i install it starts crashing like warcraft 3 cuz i just installed another game and it has the same problem as wc , what do you guys make of it?

[Far+Beyond+Entoxicated]

you guys are right im wrong im an idiot , its over heating for sure , i got hmoniter , it moniters your voltages cpu heat motherboard heat etc and my cpu heat is at its max of 46 degrees celcius not ferinheight w/e and its sayin just loading a game brings my comps heat to the max and then just barely moving makes it go over, now theres two things i can do really raise the max with that blue screen w/e that lets you mess with max heat level , sound card installation , graphics cardm installtion etc and its at the motherboard screen you access it how do you access it cuz tab f2 and del dont access it on my computer , now theres that or w/e else you could suggest