Computer reboots when opening programs

Hi kronos, Are you having this problem with the Dell comp in your System Details?
You said that you had removed the RAM sticks (1GB 512MB) and run the comp with each to test operation - does the comp go through the Shutdown and Restart when you did this test?
Otherwise I'm inclined to think you have buggy/corrupt Software which may be the cause. Neil.

 

It did at least three days ago. Currently the system stop errors are no longer occurring after updating optional updates through windows update, check disk for errors (chkdsk) with both options selected.

It's not my dell. This thread is for a Compaq Presario S4020WM Windows XP Home SP3. I left the computer on for at least 20 hours, and there has been no system errors (Stop errors). When testing the RAM sticks, there was not stop errors, except 'System recovered from Serious error'.

There were a few more BSOD when testing the RAM sticks one at a time. It occurred with the 512MB and the 1GB, i think. I was thinking about retesting the RAM sticks again, by booting with one RAM stick inserted in slot 0 and then test slot 1. Could there be a faulty memory module slot?

Here are results from event viewer:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/9/2014
Time: 3:42:56 PM
User: N/A
Computer: OWNER-CDAEF9BB8
Description:
Error code 1000000a, parameter1 00000000, parameter2 0000001c, parameter3 00000001, parameter4 804e3382.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 30 1000000
0020: 61 20 20 50 61 72 61 6d a Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 30 30 30 30 30 30 31 63 0000001c
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 31 2c 20 38 30 34 65 01, 804e
0050: 33 33 38 32 3382



Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/9/2014
Time: 3:41:23 PM
User: N/A
Computer: OWNER-CDAEF9BB8
Description:
Error code 0000009c, parameter1 00000001, parameter2 8054e270, parameter3 b6000000, parameter4 00000181.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 31 2c 20 000001,
0038: 38 30 35 34 65 32 37 30 8054e270
0040: 2c 20 62 36 30 30 30 30 , b60000
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 31 38 31 0181


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 2/4/2014
Time: 2:31:16 PM
User: N/A
Computer: OWNER-CDAEF9BB8
Description:
The cpuz136 service failed to start due to the following error:
The system cannot find the path specified.

 

Thank you. I will post in the malware forum regarding possible rootkit.

Is it possible to leave this thread open? I am hoping to retest the RAM Sticks, by removing both sticks and placing one at a time in slot 0. I plan on doing this today.

Thank you everyone for the all the help you all have given.

Update: New thread created at http://www.windowsbbs.com/malware-virus-removal/107107-possible-rootkit.html

Request: Please keep the following thread open, http://www.windowsbbs.com/windows-xp/107036-computer-reboots-when-opening-programs.html

 

Yes by all means do a further test on the RAM. My worry would be whether the RAM is same spec. ie. CL7 CL9 MHz identical ECC or non-ECC. There are quite a few details you need to check with RAM sticks to ensure they are compatible.
Yes, you may have a faulty RAM slot on the board but if you run http://www.piriform.com/speccy it would show whether the connections are giving a reading. Neil.

 

RAM specs from Speccy by Piriform:
RAM
Memory slots
Total memory slots 3
Used memory slots 2
Free memory slots 1
Memory
Type DDR
Size 1536 MBytes
DRAM Frequency 133.2 MHz
CAS# Latency (CL) 2.5 clocks
RAS# to CAS# Delay (tRCD) 3 clocks
RAS# Precharge (tRP) 3 clocks
Cycle Time (tRAS) 6 clocks
Physical Memory
Memory Usage 44 %
Total Physical 1.50 GB
Available Physical 847 MB
Total Virtual 2.86 GB
Available Virtual 2.20 GB
SPD
Number Of SPD Modules 2
Slot #1
Type DDR
Size 1024 MBytes
Manufacturer G.Skill
Max Bandwidth PC3200 (200 MHz)
JEDEC #2
Frequency 200.0 MHz
CAS# Latency 3.0
RAS# To CAS# 4
RAS# Precharge 4
tRAS 8
Voltage 2.500 V
JEDEC #1
Frequency 166.7 MHz
CAS# Latency 2.5
RAS# To CAS# 4
RAS# Precharge 3
tRAS 7
Voltage 2.500 V
Slot #2
Type DDR
Size 512 MBytes
Manufacturer Nanya Technology
Max Bandwidth PC2700 (166 MHz)
Part Number M1U51264DS8HC1G-6K
Serial Number 783A1B0B
Week/year 70 / 04
JEDEC #2
Frequency 166.7 MHz
CAS# Latency 2.5
RAS# To CAS# 3
RAS# Precharge 3
tRAS 8
Voltage 2.500 V
JEDEC #1
Frequency 133.3 MHz
CAS# Latency 2.0
RAS# To CAS# 3
RAS# Precharge 3
tRAS 6
Voltage 2.500 V

 

I think the computer is clean. Malware removal forum thread is http://www.windowsbbs.com/malware-virus-removal/107107-inactive-possible-rootkit.html

I have not uninstalled any of the programs/applications needed in the above thread. I think the RUN command for ComboFix is ComboFix /uninstall.

I received the following Stop error messages after installing AVG 2014 per users request (uninstalled again and installed Charter Internet Security Suite):

Event Viewer (eventvwr):



Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 2/15/2014
Time: 6:26:14 PM
User: N/A
Computer: ETHELBERHT
Description:
Hanging application soffice.bin, version 4.0.9714.500, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 73 6f 66 66 69 63 soffic
0018: 65 2e 62 69 6e 20 34 2e e.bin 4.
0020: 30 2e 39 37 31 34 2e 35 0.9714.5
0028: 30 30 20 69 6e 20 68 75 00 in hu
0030: 6e 67 61 70 70 20 30 2e ngapp 0.
0038: 30 2e 30 2e 30 20 61 74 0.0.0 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 30 30 30 30 30 30 00000000

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 2/15/2014
Time: 6:26:50 PM
User: N/A
Computer: ETHELBERHT
Description:
Fault bucket -435387289.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 2d 34 33 35 33 38 37 32 -4353872
0010: 38 39 0d 0a 89..

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 2/15/2014
Time: 6:28:53 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: ETHELBERHT
Description:
IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 2/15/2014
Time: 6:34:13 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: ETHELBERHT
Description:
IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 2/15/2014
Time: 6:53:07 PM
User: N/A
Computer: ETHELBERHT
Description:
The AVG WatchDog service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1003
Date: 2/15/2014
Time: 7:01:19 PM
User: N/A
Computer: ETHELBERHT
Description:
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 0040CA571C53. The following error occurred:
The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c7 04 00 00 Ç...

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 2/15/2014
Time: 7:03:06 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: ETHELBERHT
Description:
IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/15/2014
Time: 7:03:37 PM
User: N/A
Computer: ETHELBERHT
Description:
Error code 1000008e, parameter1 c0000005, parameter2 00000000, parameter3 0193d350, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 30 30 30 30 30 30 30 30 00000000
0040: 2c 20 30 31 39 33 64 33 , 0193d3
0048: 35 30 2c 20 30 30 30 30 50, 0000
0050: 30 30 30 30 0000

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 2/15/2014
Time: 7:04:22 PM
User: N/A
Computer: ETHELBERHT
Description:
Faulting application avgui.exe, version 14.0.0.4330, faulting module avgntopensslx.dll, version 14.0.0.4207, fault address 0x000a5470.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 76 67 ure avg
0018: 75 69 2e 65 78 65 20 31 ui.exe 1
0020: 34 2e 30 2e 30 2e 34 33 4.0.0.43
0028: 33 30 20 69 6e 20 61 76 30 in av
0030: 67 6e 74 6f 70 65 6e 73 gntopens
0038: 73 6c 78 2e 64 6c 6c 20 slx.dll
0040: 31 34 2e 30 2e 30 2e 34 14.0.0.4
0048: 32 30 37 20 61 74 20 6f 207 at o
0050: 66 66 73 65 74 20 30 30 ffset 00
0058: 30 61 35 34 37 30 0d 0a 0a5470..

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/15/2014
Time: 7:07:34 PM
User: N/A
Computer: ETHELBERHT
Description:
Faulting application avgidsagent.exe, version 14.0.0.4330, faulting module unknown, version 0.0.0.0, fault address 0x0b11da67.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 76 67 ure avg
0018: 69 64 73 61 67 65 6e 74 idsagent
0020: 2e 65 78 65 20 31 34 2e .exe 14.
0028: 30 2e 30 2e 34 33 33 30 0.0.4330
0030: 20 69 6e 20 75 6e 6b 6e in unkn
0038: 6f 77 6e 20 30 2e 30 2e own 0.0.
0040: 30 2e 30 20 61 74 20 6f 0.0 at o
0048: 66 66 73 65 74 20 30 62 ffset 0b
0050: 31 31 64 61 36 37 11da67


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 2/15/2014
Time: 7:07:50 PM
User: N/A
Computer: ETHELBERHT
Description:
The AVGIDSAgent service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 2/15/2014
Time: 7:12:14 PM
User: N/A
Computer: ETHELBERHT
Description:
The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 2/15/2014
Time: 7:12:38 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: ETHELBERHT
Description:
IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I will use Blue Screen Viewer from Nirsoft, for more information and post my results later this evening.

Thank again for all the help.

Update: The malware analyst replied to my thread on how to remove ComboFix. I confirmed that the RUN command is ComboFix /uninstall. Thread: Reply #10, Page 2, http://www.windowsbbs.com/malware-virus-removal/107107-possible-rootkit.html

 

I am not sure what has changed on the system, after my brothers friend decided he knew how to boost system performance.

Thank you for any advice.

There are two stop errors:

Crash Time: 2/24/2014 3:40:15 PM
Bug Check Code: 0x0000009c
Caused by: hal.dll
Bug Check String: MACHINE_CHECK_EXCEPTION
Following Information provided by BlueScreenViwer==================================================
Dump File : Mini022414-01.dmp
Crash Time : 2/24/2014 3:40:15 PM
Bug Check String : MACHINE_CHECK_EXCEPTION
Bug Check Code: 0x0000009c
Parameter 1 : 0x00000001
Parameter 2 : 0x8054e270
Parameter 3 : 0xb6000000
Parameter 4 : 0x00000181
Caused By Driver: hal.dll
Caused By Address : hal.dll+58db
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Crash Address : ntoskrnl.exe+5c85e
Stack Address 1 : hal.dll+58db
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Documents and Settings\Owner\My Documents\Minidump\Minidump\Mini022414-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
Dump File Time : 2/25/2014 12:31:12 PM
==================================================

Dump File: Mini022014-01.dmp
Crash Time: 2/20/2014 11:13:51 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code: 0x1000008e
Parameter 1: 0xc000001d
Parameter 2 : 0x815717c2
Parameter 3 : 0xb2468bfc
Parameter 4 : 0x00000000
Caused By Driver:
Caused By Address :
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Crash Address :
Stack Address 1 : ntoskrnl.exe+9a5f2
Stack Address 2 : ntoskrnl.exe+77f8
Stack Address 3 :
Computer Name :
Full Path : C:\Documents and Settings\Owner\My Documents\Minidump\Minidump\Mini022014-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536

 

Hi kronos, Sorry I didn't get back to you earlier.

Try running your comp with the 1GB RAM only for a few days to see if you have any repeat problems.
My concern is that your RAM Bandwidth and CAS Latency are different.
It has been my experience that for total reliability - the RAM should be IDENTICAL in structure. Neil.

 

Thank you for the quick response. I will run with the 1GB RAM stick installed for a few days and see if the Stop errors or restarts occur (computer restarts on its own).

Does it matter which slot I place the 1GB RAM stick in?

Motherboard Specs from Speccy:
KM266-8235 (Socket A) 40 °C
Motherboard
Model KM266-8235 (Socket A)
Version 0n31411RE101SALSA10
Chipset Vendor VIA
Chipset Model P4M266/KM266 (VT8375)
Chipset Revision 00
Southbridge Vendor VIA
Southbridge Model VT8235
Southbridge Revision 00
System Temperature 40 °C
BIOS
Brand Phoenix Technologies, LTD
Version AM37312
Date 3/17/2003
Voltage
CPU CORE 1.632 V
MEMORY CONTROLLER 2.560 V
+3.3V 3.120 V
+5V 4.677 V
+12V 11.776 V
-12V (13.696) V
+5V HIGH THRESHOLD 4.892 V
CMOS BATTERY 1.008 V
PCI Data
Slot PCI
Slot Type PCI
Slot Usage Available
Bus Width 32 bit
Slot Designation PCI0
Characteristics 5V, PME
Slot Number 0
Slot PCI
Slot Type PCI
Slot Usage In Use
Bus Width 32 bit
Slot Designation PCI1
Characteristics 5V, PME
Slot Number 1
Slot PCI
Slot Type PCI
Slot Usage Available
Bus Width 32 bit
Slot Designation PCI2
Characteristics 5V, PME
Slot Number 2
Slot PCI
Slot Type PCI
Slot Usage In Use
Bus Width 32 bit
Slot Designation PCI3
Characteristics 5V, PME
Slot Number 3
Slot AGP
Slot Type AGP
Slot Usage Available
Bus Width 32 bit
Slot Designation AGP
Characteristics 5V
Slot Number 4

 

Use slot #1 for this test. Neil.

 

I am not sure how to determine the slot numbers. I removed the 512MB RAM stick and so far no more stop errors. I am looking over the event logs to see if any occurred while my brother was using it.

Thank you all for all the advice. I hope to keep this thread open for a little bit longer.