Confused PC - Hijack This log

waddler_8

Download this and save it to your desktop.

http://public.avast.com/~gmerek/aswMBR.exe

When you've downloaded it...

• Right click aswMBR.exe & choose "Run as Administrator" to run it
  
• Click Yes if prompted to scan with Avast virus definitions
  
• Ensure the AVscan is set to Quick Scan, click the Scan button.
  
  
• When the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
• Click OK when prompted. aswMBR.txt & MBR.dat will be appear on your desktop.
• Click EXIT.
• Copy & paste the contents of aswMBR.txt & post it here.

Don't click to fix anything yet, just post the log.

JohnG

Here we go then (fingerscrossed ):
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-05-26 00:42:17

---

00:42:17.215 OS Version: Windows x64 6.1.7601 Service Pack 1
00:42:17.215 Number of processors: 4 586 0x2A07
00:42:17.215 ComputerName: MAINPC UserName:
00:42:18.035 Initialize success
00:42:18.335 AVAST engine defs: 12052501
00:43:18.075 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
00:43:18.085 Disk 0 Vendor: Hitachi_HDS721010CLA332 JP4OA3MA Size: 953869MB BusType: 3
00:43:18.125 Disk 0 MBR read successfully
00:43:18.125 Disk 0 MBR scan
00:43:18.125 Disk 0 Windows 7 default MBR code
00:43:18.135 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
00:43:18.135 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 204799 MB offset 206848
00:43:18.155 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 748968 MB offset 419635200
00:43:18.175 Disk 0 scanning C:\Windows\system32\drivers
00:43:22.005 Service scanning
00:43:30.795 Modules scanning
00:43:30.795 Disk 0 trace - called modules:
00:43:30.805 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
00:43:30.805 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004d14060]
00:43:30.805 3 CLASSPNP.SYS[fffff8800198b43f] -> nt!IofCallDriver -> [0xfffffa8004760520]
00:43:30.805 5 ACPI.sys[fffff88000f1a7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004aa7060]
00:43:31.205 AVAST engine scan C:\Windows
00:43:32.195 AVAST engine scan C:\Windows\system32
00:44:27.695 AVAST engine scan C:\Windows\system32\drivers
00:44:32.385 AVAST engine scan C:\Users\John & Clare
00:49:06.319 AVAST engine scan C:\ProgramData
00:49:24.009 Scan finished successfully
00:49:57.449 Disk 0 MBR has been saved successfully to "C:\Users\John & Clare\Desktop\MBR.dat"
00:49:57.449 The log file has been saved successfully to "C:\Users\John & Clare\Desktop\aswMBR.txt"

waddler_8

That looks good.

Did you manage to run chkdsk?

JohnG wrote: »

Not sure how to do this? I can get the cmd prompt up but that's as far as I can go

http://windows.microsoft.com/en-GB/windows7/Check-a-drive-for-errors

It may take a while - do it overnight whilst you're in bed.

JohnG

waddler_8 wrote: »

That looks good.

Did you manage to run chkdsk?

http://windows.microsoft.com/en-GB/windows7/Check-a-drive-for-errors

It may take a while - do it overnight whilst you're in bed.

No hvnt done this but will give it a go using the instructions youve given - shld I hv it automatically fix system errors or scan for and attempt recovery of bad sectors? Or both?

waddler_8

have it do both.

closed

hitachi disk drive - done that backup yet?;)

JohnG

waddler_8 wrote: »

That looks good.

Did you manage to run chkdsk?

http://windows.microsoft.com/en-GB/windows7/Check-a-drive-for-errors

It may take a while - do it overnight whilst you're in bed.

Done these now. The first option is scheduled to start when the pc is next turned so done that this morning and I recognised it from recent re-boot attempts.
In both cases nothing bad is reported - and no repairs required?

. . . . . . . . .

Hi Closed

"hitachi disk drive - done that backup yet?;)"

Hitachi Disk Drive? Oh well beggars can't be choosers No I havnt done the back-up as yet but will do (famous last words )

waddler_8

Figment wrote: »

Download DDS from the link below and save it to your desktop:

JohnG wrote: »

Unfortunately a box still comes up with NSIS Error launching installer?

Where are you running DDS from? Are you saving the file to your Desktop?



RE: KERNEL_DATA_INPAGE_ERROR

JohnG wrote: »

OX0000007A, OX00000020, OXFX8C,OX59D etc (I gave up noting all the zeros so the above are shortened versions)

There's a parameter missing there:

It should show: STOP 0X0000007A (0X00000020, 0x********, 0xFX8C, 0x59D)

That second missing parameter might give more of a clue.

JohnG

Had another go a backing up using the on-board system, the first atempt reached 97% but failed at the last hurdle sighting "Problem with the back-up catalog" this time though, I was given the option to, something like, clear the catalog and retry, which is what I did. The difference the second time was it didnt mention "Create system image" but showed the various files it was backing up, which it wasn't showing the first time?

Anyway, it actually finished successfully this time so hopefully that will sufficient for the back-up?

JohnG

waddler_8 wrote: »

Where are you running DDS from? Are you saving the file to your Desktop?



RE: KERNEL_DATA_INPAGE_ERROR

There's a parameter missing there:

It should show: STOP 0X0000007A (0X00000020, 0x********, 0xFX8C, 0x59D)

That second missing parameter might give more of a clue.

Hi Waddler_8,
I had it saved on 'download' folder so I copied it over onto the desk top, again had to disable Avast, tried running it but still just flashes up a box very very quickly and that's it?

I'm afraid I didnt note all the STOP numbers, only those as I gave previously. I'll will make sure to note them all if and when it happens again. Currently everything seems to be working OK.