PS: Microsoft has a free support line to assist with infections of this nature. you can reach it in the US via: 1-866-PCSafety
it healed some files Did you make a note of what was found? It would be helpful to know if we have to get a hijackthis. My recommendation...
thanks for following up. According to ben, Family 6, model 7 means this probably applies to you. If the machine starts acting up again, give that...
Do you get a DMP file generated? Can you run it through the tool in my signature? Try searching your drives for a *.DMP file that was created...
well, i took the search challenge and went back through a bunch of posts. Dont ask me how, but this slider move to 6 reboot trick has worked many...
yup. good job. You are infected with malware. you have a file called kqqDA.tmp that is loading. Its trying to hook into it somehow, and is blowing...
could you use FileMon from sysinternals and see whos doing what?
the dump is in pretty bad shape. I dont know what went wrong there, but its messed up pretty good. From the cookie crumbs i can see, this is a...
did you search your hard drive for *.DMP files that matched the time/date of this crash occurance?
its worth a shot. Make note of what you see when it crashes, make sure you follow that article, to ensure you have your pagefile big enough (1.2...
ok, well done. Thats what we needed. This is crashing while manipulating a reg key. In my experience, if you have a full dump (this one is just...
Interesting.. too bad this guy hasnt been back, would be interesting to see the !APIC, !PCR and !cpuid output to see if thats possible. Looks like...
did you get a dump from the 7E? sometimes they are helpful, if you got one, run it through the tool in my signature.
yup, your back where we started. bum timer on the list. verifier as before.
I wrote a little utility to automate setting the debugger up with all the correct swtiches to run. Youll find it in my signature. Can you rerun...
Follow the instructions in this post: http://www.windowsbbs.com/showthread.php?t=33471
hmm. i can beleive it, the place that machine crashed at is pretty wierd. You got a model/stepping or an erratum reference for that, timeout?
which instruction did you get stuck on?
make sure your machine is setup for a dump file and run it through the tool in my signature. im taking bets that the starforce driver is on the...
this is digging deep into the archives of random stuff i cannot prove, but isnt there something about using TFTP/bootP and static ARP entries. I...
Separate names with a comma.