CPU freezes 2

[colin17184]

My brother and I removed all the parts from his Dell computer and put them in a new case. It seemed to be working fine for about a month or so, but now it keeps freezing at random moments. We reformated the hard drive, but it didnt fix the problem. We thought it might have something to do with the heat, so we hooked up 4 fans to blow directly on the processor, but I'm not sure that that worked either because we just turned it on after being off overnight, and it froze again after just a couple minutes. By reformatting the cpu I would think it's a hardware-based problem, but I have no clue what to do. If anyone has any ideas please post them. Thanks a lot.

Colin

 

[franklin97355]

It still could be a heat problem. Or a loose connection somewhere. Check the cpu, heatsink, and memory to make sure they are seated correctly.

 

[shaner66]

Reseat everything.

Take out all RAM except one stick (if you have more than one installed), take out all optical drives, sound card, modem, NIC, etc. Leave HDD, video card, one stick of RAM, and MB connected, try it like that. If you get the same problem, switch the stick of RAM that's in the machine for one of the other sticks. Try again.

Also, reseat the heatsink and CPU fan if you're comfortable doing that.

Can you check the voltage coming out of the power supply? If so, do that as well.

 

[pctechnician]

also if its worth the time, swing the hardware back to the old case to see if it maybe the case. Although i doubt that it could be the case, I'd just wanna eliminate all possibities.

A+,Net+

 

[colin17184]

I went up to the electronics store today and bought a new heatsink for the cpu and replaced the old one. We now have the CPU fan running off of the power supply, with another fan running off of the "Cpu fan" port on the motherboard because the plug isnt compatible. Now we are not able to determine if this solved the problem because after booting up it gives this message before randomly shutting down: The shutdown was initiated by NT Authority\System Remote procedure call terminated unexpectedly. Anyone know why it gives me this message? Thanks alot

Colin

 

[shaner66]

You just caught the latest worm that is in circulation. Are you running Windows XP?

Don't feel too bad though, millions of people around the world are having the same problem.

Go to the Windows update site and get the update.

Search for msblast.exe and delete that file.

If your comfortable going into the registry the bug lives here:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, name: 'windows auto update'

Delete it and reboot

Install a firewall immediately!!!

Update your virus scan utility, and run a virus scan, or run one online at

http://www.housecall.antivirus.com

Here is what has been found so far

- Scans sequentially for machines with open port 135, starting at a presumably random IP address
- uses multiple TFTP servers to pull the binary
- adds a registry key to start itself after reboot

Here is a list of known TFTP servers for this worm

204.210.57.87
217.211.179.193
24.147.64.171
24.147.64.205
24.147.64.208
24.147.65.146
24.147.65.45
24.147.65.9
61.254.65.159
67.119.36.219
68.112.65.38
68.166.102.136
68.166.107.21
68.166.111.175
68.166.120.34
68.166.121.135
68.166.123.4
68.166.124.186
68.166.124.93
68.166.139.155
68.166.139.210
68.166.141.66
68.166.142.194
68.166.142.215
68.166.36.178
68.166.56.123
68.166.60.51
68.166.98.3

Good luck

 

[colin17184]

shaner66 i think you nailed that one right on. He searched for and found the file msblast.exe then deleted it. Can someone be a little more specific on how to exit the registry though? I thought there was a registry tab in msconfig but I couldn't find it. Fortunately, we had a firewall running on the comp. Thanks for the tip, I'll see if this fixes it. BTW can you tell me how you knew it was the worm? What are the symptoms that tipped you off? Thanks again

Colin

 

[shaner66]

"The shutdown was initiated by NT Authority\System Remote procedure call terminated unexpectedly."

That's what tipped me off.

Also, to edit the registry, go to start - run, type regedit, hit ok. You're now in the registry; however, you can cause problems in windows by making changes in the registry, so I would recommend leaving it alone.

Just get the updates, run your virus scan and always have a firewall running, at all times!!!

 

[norty303]

There will prob also be files called TFTP**** (where * is a number) in windows\system32 that will also need to be removed. And don't forget to right click My Computer --> Properties --> System Restore ---> Disable then rescan for the files in your restore folder otherwise windows will justy put em all back again!! Don't forget to re-enable afterwards too.