Solved Complete system reboot without user prompting. First build

January 17, 2015 at 12:32:19
Specs: Windows 7
Currently having a problem where my week old build it's been shutting off randomly with any warning, as if there was a power cut then 3 - 5 seconds later it reboot and sometimes it will work fine then other times it will just shut off again, even during "repair windows files"


CPU:i5 4690k (with H75 cooler)
Mobo: Msi z97i gaming AC
PSU: 600w Gold sfx silver stone
Ram: 2 x 4GB Corsair vengeance pro (2400Mhz)
GPU: 270x 2GB sapphire twin
Storeage: Kingston 120GB SSD
Case: Ncase M1(ITX sfx psu only)
OS: Windows 7 (legit copy)


See More: Complete system reboot without user prompting. First build

Report •

✔ Best Answer
March 4, 2015 at 18:54:12
Cpu heatsink and fan properly attached? Not likely the cpu itself since it works some time. Maybe the motherboard. I can't think of anything else.

message edited by DAVEINCAPS



#1
January 17, 2015 at 12:49:34
Do you get a blue screen?

Report •

#2
January 17, 2015 at 13:20:44
Did it work at first?

Use this to give us your temperature measurements:
http://www.cpuid.com/

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#3
January 17, 2015 at 13:33:15
There is no BSOD, it worked fine for the first few days then this issue came up 3 days ago

Report •

Related Solutions

#4
January 17, 2015 at 13:35:25
Have you overclocked?

Does it reboot when you are using Safe mode?

Remove your video card & connect to onboard, then test.

Reseat the memory.


Report •

#5
January 17, 2015 at 13:36:08
Cpu reading was 38°C after a crash/reboot
There is no OC, I reset everything to default after the issue started.
Will try safe mode now. Edit:Crashed in safe mode.

message edited by Azzza42


Report •

#6
January 17, 2015 at 13:37:35
-snip-

message edited by Azzza42


Report •

#7
January 17, 2015 at 13:45:09
-snip-

message edited by Azzza42


Report •

#8
January 17, 2015 at 13:50:15
Test after doing this.

Control Panel -> Power Options -> Change plan settings -> Change advanced power settings -> Power buttons and lid -> Power button action.

Change that setting to "Do Nothing".

http://www.howtogeek.com/howto/wind...


Report •

#9
January 17, 2015 at 13:51:53
"Remove your video card & connect to onboard, then test"
Did you?

Report •

#10
January 17, 2015 at 14:00:44
Haven't yet, as the crash happens randomly, could be 5 seconds after start up or 5 hours later very hard to test. The power button is currently set on "sleep"

message edited by Azzza42


Report •

#11
January 17, 2015 at 14:03:15
And when I say crash I mean the computer die as if a power cut just happened and then restarts as power has returned

Report •

#12
January 17, 2015 at 14:13:42
" as the crash happens randomly, could be 5 seconds after start up or 5 hours later very hard to test"
Yep, that's normal.

"And when I say crash I mean the computer die as if a power cut just happened and then restarts as power has returned"
That's how I understood it.

Let me have a look at these logs for clues.

Please download Farbar Recovery Scan Tool and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
http://www.bleepingcomputer.com/dow...
If we have to run Farbar more than once, refer this SS.
http://i.imgur.com/yUxNw0j.gif
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the Desktop.
The first time the tool is run, it makes also another log (Addition.txt).
The logs are large, upload them using this, or upload to a site of your choosing. No account needed. Give us the links please.
http://www.zippyshare.com/
Instructions on how to use ZippyShare.
http://i.imgur.com/naG6t2T.gif
http://i.imgur.com/Vi9ZdIh.gif
http://i.imgur.com/1IZu5kP.gif


Report •

#13
January 17, 2015 at 14:16:27
"The power button is currently set on "sleep"
I would change that to Never, too many problems with Sleep.

Report •

#14
January 17, 2015 at 14:20:51
Getting a bit stressed out now due to a £1k machine not working!! So I'll get the log for you tomorrow, thanks for the help so far

Report •

#15
January 17, 2015 at 14:28:33
"Getting a bit stressed out"
Gets like that, catch you when you are ready.

Report •

#16
January 17, 2015 at 17:06:09
Another thing you could do (when you feel ready) is this:
http://pcsupport.about.com/od/windo...

Instead of restarting you will get a blue screen which contains an error code which might help us. If there is a file mentioned give us that too.

Always pop back and let us know the outcome - thanks


Report •

#17
January 18, 2015 at 00:18:25
If it's shutting off like the power was cut, well maybe it was. Have you checked the power cord, power connections, maybe swapped in a compatible power supply?

Report •

#18
January 18, 2015 at 01:57:56
Already unchecked auto restart, still no BSOD

Report •

#19
January 18, 2015 at 02:43:00
"Getting a bit stressed out now due to a £1k machine not working!! So I'll get the log for you tomorrow, thanks for the help so far"
Don't forget, I don't need a BSOD.

Report •

#20
January 18, 2015 at 03:19:33
Farbar results : http://www60.zippyshare.com/v/TQ5nY...

Report •

#21
January 18, 2015 at 03:26:26
"Farbar results"
Thanks, did you have a look yourself?

Derek.
"Instead of restarting you will get a blue screen which contains an error code which might help us. If there is a file mentioned give us that too"
All that info is in the Farbar results.

Got to go out for a while, back ASAP.

message edited by Johnw


Report •

#22
January 18, 2015 at 04:38:47
seems like I'm having the same problem as this guy http://www.computing.net/answers/ha...

Report •

#23
January 18, 2015 at 04:47:51
Process of elimination. Here are things to try & then test. Just one thing at a time, wait until you get a BSOD ( if at all ) before you move on. If you get a dump file, I still need that.

"Ram: 2 x 4GB Corsair vengeance pro (2400Mhz)"
Test with just one stick at a time.

From the Farbar logs.
"Error: (01/18/2015 11:07:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FastBoot.exe,
Error: (01/18/2015 11:07:39 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: FastBoot.exe"
I would uninstall FastBoot using the Wise uninstaller. You can always reinstall later.
Wise Program Uninstaller
http://www.softpedia.com/get/Tweak/...
http://www.freewarefiles.com/Wise-P...
http://www.freewarefiles.com/screen...
http://wisecleaner.com/wiseuninstal...

"Error: (01/18/2015 11:07:25 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003"
You need to run Tweaking.com for this error. Exclude the Malwrebytes scan. You will see other errors in the logs, Tweaking.com will probably fix those as well.

Run Tweaking.com - Windows Repair

Disable your antivirus program before running Windows Repair.
How to Temporarily Disable your Anti-virus
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...

Start at Step 1 & when you get to the final step ( Repairs ) check/tick all the boxes. Reboot when finished.

http://www.softpedia.com/get/Tweak/...
http://www.tweaking.com/
http://www.tweaking.com/content/pag...

How to run Tweaking.com excluding Step 2 ( Malwarebytes scan )
http://i.imgur.com/va6V4tw.gif
http://i.imgur.com/ryjNIEV.gif
http://i.imgur.com/zV5VeU0.gif

Copy and Paste the contents ( or upload ) of the following log in your reply:
32-bit
C:\Program Files > Tweaking.com > Windows Repair (All in One) > Tweaking.com_Windows_Repair > Logs
64-bit
C:\Program Files (x86) > Tweaking.com > Windows Repair (All in One) > Tweaking.com_Windows_Repair > Logs
Refer SS ( screenshots )
http://i.imgur.com/6zQBU9H.gif
http://i.imgur.com/e63WNzy.gif


Report •

#24
January 18, 2015 at 04:49:09
"seems like I'm having the same problem as this guy"
Maybe.

Report •

#25
January 18, 2015 at 04:52:17
My bedtime is looming, so catch you later.

Report •

#26
January 18, 2015 at 06:09:01
I enabled "boot with logging" then retrieved the ntbtlog.txt file in safe mode.(doen't crash in safe mode that was my error)
ntbtlog.txt: http://www63.zippyshare.com/v/ScW8R...

Report •

#27
January 18, 2015 at 06:24:27
Computer starts its self after I shut it down in safemode

Report •

#28
January 18, 2015 at 07:13:58
John Re #21 para 2.
Thanks for the heads-up.

Always pop back and let us know the outcome - thanks


Report •

#29
January 18, 2015 at 09:16:05
tweaking.com repair logs http://www15.zippyshare.com/v/kcs5x...

Edit: System still crashing

Just a side note, if the system doen't crash in safemode does that mean that it is a software issue? Because I do have another PC I could plug my ssd into and compleate wipe all the data on it then reinstall all my programs?

message edited by Azzza42


Report •

#30
January 18, 2015 at 10:32:33
Would wipe ing the OS drive work then?

Report •

#31
January 18, 2015 at 11:42:02
"Would wiping the OS drive work then?"
Possibly but not certain at this stage. It wouldn't help if it turned out to be a hardware fault. Johnw probably has some ideas in mind but if you want to try something in the meantime, remove the RAM and clean it's edge connectors with a pencil eraser - same could apply to any other add-on cards, and also SATA HD power and signal plugs. Even new hardware can be affected by this as it can take very little oxide to cause problems.

Check that all internal connectors are firmly in place while you are in there.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#32
January 18, 2015 at 12:56:30
"It wouldn't help if it turned out to be a hardware fault" is it possible for it to be a hardware fault if it works fine in safemode?

Report •

#33
January 18, 2015 at 13:14:02
Re #32
Agreed, hardware faults are unlikely to be selective, so a software fault is more likely. One difference in Safe Mode is that you have minimal drivers.

It is possible that some background task or program is starting which causes a confliction. You could disable items In msconfig Startup to see if anything there helps, in which case it would narrow things down. The virus checker is another possible as it is something that chases activity.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#34
January 18, 2015 at 13:21:21
"it works fine in safemode?"
I'm happy to keep trying to track down the problem.

Did you remove FastBoot?
Have you cleaned the memory & tried one stick at a time?

If you go down the reinstall path, make sure when you reinstall, you delete ALL partitions & format to NTFS.

W7 - Click on > Drive options (advanced) Then highlight each partition & hit > Delete.
http://www.blackviper.com/os-instal...
http://www.blackviper.com/os-instal...

Here are some examples of why you delete all partitions.
http://forums.spybot.info/showthrea...
http://forums.whatthetech.com/index...
http://blog.eset.com/2011/10/18/tdl...


Report •

#35
January 18, 2015 at 13:31:32
Maybe #16 should be tried after all - it might give an extra clue and it is probably best left set that way anyhow. It could be that it just didn't misbehave during the Farbar run.

Always pop back and let us know the outcome - thanks


Report •

#36
January 18, 2015 at 13:40:55
#16 was done before I even started the thread and no luck, it even restarts when I shutit down normally.
And fast boot has been removed, both stick are brand new but I will try one at a time tomorrow.

Report •

#37
January 18, 2015 at 13:43:47
I was leaning towards maybe its a psu cable but that would mean safemode or not, it would crash in both instances, right?

Report •

#38
January 18, 2015 at 13:45:24
Maybe restarts on shutdown is a clue.

There are several suggestions here:
https://social.technet.microsoft.co...
Quite a mixed bag of fixes though and no really good reason to point to any particular one.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#39
January 18, 2015 at 13:54:44
Run Farbar again please, follow this SS & upload the 2 new logs.
http://i.imgur.com/i3fg3Pf.gif

Report •

#40
January 18, 2015 at 15:00:15
What do you mean by "SS"?

Report •

#41
January 18, 2015 at 15:06:34
SS > Screen shot.

Always pop back and let us know the outcome - thanks


Report •

#42
January 19, 2015 at 01:35:07
farbar results 2 : http://www63.zippyshare.com/v/NLdiC...

Report •

#43
January 19, 2015 at 02:56:30
No more Fast Boot errors in your Event log since you removed it. Test after doing this, then I shall work on the other remaining error in the log.

Copy & Paste the text below ( starting closeprocesses: ), save it into Notepad on your Desktop & name it fixlist.txt
NOTE: It is important that Notepad is used. The fix will not work if Word or some other program is used.
NOTE: It is important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

closeprocesses:
emptytemp:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2576612492-3785154604-734621479-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2576612492-3785154604-734621479-1000 -> DefaultScope {86CFABB8-EE20-4E58-9281-83609B3EC6A6} URL = https://search.yahoo.com/search?fr=...
SearchScopes: HKU\S-1-5-21-2576612492-3785154604-734621479-1000 -> {86CFABB8-EE20-4E58-9281-83609B3EC6A6} URL = https://search.yahoo.com/search?fr=...
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
S2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 NTIOLib_FastBoot; \??\C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [X]

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that, let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please Copy & Paste the contents into your reply.


Report •

#44
January 19, 2015 at 10:01:32
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 19-01-2015
Ran by AJ at 2015-01-19 17:59:32 Run:1
Running from C:\Users\AJ\Desktop\Repairing
Loaded Profiles: AJ (Available profiles: AJ)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
closeprocesses:
emptytemp:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2576612492-3785154604-734621479-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2576612492-3785154604-734621479-1000 -> DefaultScope {86CFABB8-EE20-4E58-9281-83609B3EC6A6} URL = https://search.yahoo.com/search?fr=...
SearchScopes: HKU\S-1-5-21-2576612492-3785154604-734621479-1000 -> {86CFABB8-EE20-4E58-9281-83609B3EC6A6} URL = https://search.yahoo.com/search?fr=...
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
S2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 NTIOLib_FastBoot; \??\C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [X]
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-2576612492-3785154604-734621479-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\S-1-5-21-2576612492-3785154604-734621479-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2576612492-3785154604-734621479-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{86CFABB8-EE20-4E58-9281-83609B3EC6A6}" => Key deleted successfully.
HKCR\CLSID\{86CFABB8-EE20-4E58-9281-83609B3EC6A6} => Key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
MSI_FastBoot => Service deleted successfully.
MSICDSetup => Service deleted successfully.
NTIOLib_1_0_C => Service deleted successfully.
NTIOLib_FastBoot => Service deleted successfully.
EmptyTemp: => Removed 930.7 MB temporary data.


The system needed a reboot.

==== End of Fixlog 17:59:54 ====


Report •

#45
January 19, 2015 at 10:14:54
by the way the link didn't show up in full

"https://search.yahoo.com/search?fr=..." was shown insted of
"https://search.yahoo.com/search?fr=mcafee&type=B011US739D20150111&p={SearchTerms}"

Farbar reults post "fix" (still having issues)
http://www56.zippyshare.com/v/VUfY9...

message edited by Azzza42


Report •

#46
January 19, 2015 at 13:44:07
Thanks, now to remove your adware.

Run them in this order.

Step 1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.raymond.cc/blog/adwclean...
http://www.bleepingcomputer.com/dow...
Author's site
http://general-changelog-team.fr/en...
Tutorial
http://general-changelog-team.fr/en...
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan.
Click this link to see a list of security programs that should be disabled and how to disable them.
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved onto your Desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.


Report •

#47
January 19, 2015 at 15:10:26
# AdwCleaner v4.108 - Report created 19/01/2015 at 22:55:48
# Updated 17/01/2015 by Xplode
# Database : 2015-01-18.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : AJ - AARONS-MISFIT
# Running from : C:\Users\AJ\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\Users\AJ\AppData\Roaming\OpenCandy

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0 (x86 en-US)


*************************

AdwCleaner[R0].txt - [665 octets] - [19/01/2015 22:55:48]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [724 octets] ##########


next file:
# AdwCleaner v4.108 - Report created 19/01/2015 at 22:58:00
# Updated 17/01/2015 by Xplode
# Database : 2015-01-18.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : AJ - AARONS-MISFIT
# Running from : C:\Users\AJ\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\AJ\AppData\Roaming\OpenCandy

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0 (x86 en-US)


*************************

AdwCleaner[R0].txt - [803 octets] - [19/01/2015 22:55:48]
AdwCleaner[S0].txt - [727 octets] - [19/01/2015 22:58:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [786 octets] ##########


Next file:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 7 Home Premium x64
Ran by AJ on 19/01/2015 at 23:06:21.36
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ FireFox

Successfully deleted: [Folder] C:\Users\AJ\AppData\Roaming\mozilla\firefox\profiles\21d44res.default\conduitcommon
Emptied folder: C:\Users\AJ\AppData\Roaming\mozilla\firefox\profiles\21d44res.default\minidumps [540 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19/01/2015 at 23:08:08.57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Report •

#48
January 19, 2015 at 15:19:15
Update & Run Malwarebytes' Anti-Malware ( MBAM ) Free Version. Use Quick scan ( now called Threat Scan )
Malwarebytes' Anti-Malware
http://www.softpedia.com/get/Antivi...
http://www.malwarebytes.org/free/
Make sure you uncheck > Enable free trial < at the END of the install.
http://i.imgur.com/tUFCbYz.gif
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box to Scan for rootkits.
http://i.imgur.com/dZgt1g2.gif
Copy and Paste the contents of the log, in your reply please.

If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.
If your MBAM log indicates "No action taken". That's usually a result of NOT clicking the Apply Actions button after the scan. In most cases, a restart will be required.
If you misplace your log, here are ways to find.
http://i.imgur.com/U9IqcVj.gif
http://i.imgur.com/zHMG6J9.gif
http://i.imgur.com/ZZ1trsv.gif
http://i.imgur.com/LL0K3qs.gif
Or,
(Export log to save as txt)
After the restart once you are back at your desktop, open MBAM once more.
Click on the History tab > Application Logs.
Double click on the scan log which shows the Date and time of the scan just performed.
Click 'Export'.
Click 'Text file (*.txt)'
In the Save File dialog box which appears, click on Desktop.
In the File name: box type a name for your scan log.
A message box named 'File Saved' should appear stating "Your file has been successfully exported".
Click Ok
http://i.imgur.com/LNl3Sgw.gif
http://i.imgur.com/xGJgawB.gif


Report •

#49
January 20, 2015 at 00:23:12
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 20/01/2015
Scan Time: 08:16:09
Logfile: Malwarebytes Anti-Malware Log.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.01.20.03
Rootkit Database: v2015.01.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: AJ

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 334929
Time Elapsed: 5 min, 45 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)


Report •

#50
January 20, 2015 at 00:48:16
"still having issues"

Go into the bios & disable these, then test. If Ok, renable one at a time. Obviously, if your board doesn't support these, you won't be able to do them.

* CPU Enhanced halt (C1E)
* C3/C6 State
* CPU EIST


Report •

#51
January 20, 2015 at 08:10:18
CPU EIST - Disabled
I there's were n/a

Will edit if crash occurs


Report •

#52
January 20, 2015 at 09:17:00
still crashing, don't know if I should of mentioned this berfore but I am running a 4480 x 1080 moniters (16:9 & 21:9)

Report •

#53
January 20, 2015 at 10:29:52
Just tried with one stick of ram, system crashed took longer to reboot

Also checked, and all cables a connected properly


Report •

#54
January 20, 2015 at 11:22:07
Assuming you have another RAM stick did you try it with just that one instead?

Always pop back and let us know the outcome - thanks


Report •

#55
January 20, 2015 at 11:27:14
UPDATE: My computer just crashed in safemode.....this cant be good

Report •

#56
January 20, 2015 at 11:35:07
It crashes one a single ram stick,no matter which stick is currently installed.

Report •

#57
January 20, 2015 at 12:49:50
Just removed the Grpahics card and when I went to switch the power on (mains) the psu was making a crackerling sound, pressed the power button and I get nothing. I have now given up. A big thanks to Johnw & Derek. I will post again when I solve and figure out the problem

message edited by Azzza42


Report •

#58
January 20, 2015 at 13:15:16
"I will post again when I solve and figure out the problem"
Yes please.

This was going to be my next test.

Under Control Panel – open Power Options
Under the Power Schemes pull down menu
To turn Enhanced Intel SpeedStep Technology ON select, “Minimal Power Management,” power scheme.
To turn Enhanced Intel SpeedStep Technology OFF select, “Always On,” power scheme.
To verify that Enhanced Intel SpeedStep® Technology is enabled do the following:
Close all applications and ensure that Microsoft Windows* OS is in idle mode.
Press Ctrl + Alt + Delete and select the Performance tab. Verify that CPU usage is 0%.
Right click My Computer and select, “Properties.”
Under the General tab examine the installed processor and speed. If Enhanced Intel SpeedStep Technology is enabled, two processor speeds will be listed. The first speed listed is the specified speed of the processor. The second speed is the current operating speed. The second speed will be less then the 1st speed. This indicates that Enhanced Intel SpeedStep Technology has effectively lowered the processor voltage and core frequency, which can (depending on system usage and design) result in decreased average power consumption and decreased average heat production. If Enhanced Intel SpeedStep Technology is off then both processor speeds will be equal.


Report •

#59
January 20, 2015 at 14:32:30
the psu was making a crackerling sound
Obviously nothing to do with any software you ran. Most likely the PSU itself is dud, could be that it just coped with the lighter load in Safe Mode.

Always pop back and let us know the outcome - thanks


Report •

#60
January 20, 2015 at 21:28:37
Yeah, you may want to swap in a different power supply as was suggested way up in
# 17.

Report •

#61
February 24, 2015 at 09:01:38
UPDATE: followed advice and got my psu RMA'd new one came plugged everything in and it then crashed.

Report •

#62
February 24, 2015 at 09:48:38
Might be best to bite the bullet and re-install the operating system. You shouldn't have too much of your own stuff to put back as it was only a week ago. It might prove something, as it should at least behave itself until you add your third party software. If so you can see which particular software install screws it up.

If it still plays up immediately after a clean re-install then it must be a hardware fault. There is a vague possibility that a hardware fault screwed up the software, so maybe there was an issue with the original PSU after all.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#63
February 24, 2015 at 10:00:35
will I have to re-activate windows then?

Report •

#64
February 24, 2015 at 10:38:44
Yes, I'm afraid so. It's a bit of a nuisance but it should work out OK.

Always pop back and let us know the outcome - thanks


Report •

#65
February 24, 2015 at 19:30:41
In what way did it 'crash'--symptoms, screen messages, etc?

Report •

#66
February 24, 2015 at 23:40:20
As in it looked like it lost power, no warning no freezing just one moment its on and then it's like the mains cut out, no BSOD just off, then it restarts.

Report •

#67
February 24, 2015 at 23:49:24
Here are the error logs, from the last Farbar scan.

==================== Event log errors: =========================

Application errors:
==================
Error: (01/19/2015 08:52:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (01/19/2015 08:52:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/18/2015 09:53:47 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (01/18/2015 09:53:47 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/18/2015 09:45:00 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (01/18/2015 09:45:00 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/18/2015 09:41:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (01/18/2015 09:41:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/18/2015 09:41:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FastBoot.exe, version: 1.0.1.2, time stamp: 0x534d02db
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
Exception code: 0xe0434352
Fault offset: 0x0000c42d
Faulting process id: 0x1674
Faulting application start time: 0xFastBoot.exe0
Faulting application path: FastBoot.exe1
Faulting module path: FastBoot.exe2
Report Id: FastBoot.exe3

Error: (01/18/2015 09:41:07 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: FastBoot.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Windows.Markup.XamlParseException
Stack:
at System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
at System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
at System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
at System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
at System.Windows.Application.LoadComponent(System.Uri, Boolean)
at System.Windows.Application.DoStartup()
at System.Windows.Application.<.ctor>b__1(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.DispatcherOperation.InvokeImpl()
at System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Windows.Threading.DispatcherOperation.Invoke()
at System.Windows.Threading.Dispatcher.ProcessQueue()
at System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
at System.Windows.Threading.Dispatcher.Run()
at System.Windows.Application.RunDispatcher(System.Object)
at System.Windows.Application.RunInternal(System.Windows.Window)
at System.Windows.Application.Run(System.Windows.Window)
at FastBoot.App.Main()


System errors:
=============
Error: (01/19/2015 09:30:12 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom

Error: (01/19/2015 09:30:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MSI_FastBoot service failed to start due to the following error:
%%2

Error: (01/19/2015 09:28:43 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom

Error: (01/19/2015 09:28:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MSI_FastBoot service failed to start due to the following error:
%%2

Error: (01/19/2015 09:11:27 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {209500FC-6B45-4693-8871-6296C4843751}

Error: (01/19/2015 08:48:21 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom

Error: (01/19/2015 08:48:20 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MSI_FastBoot service failed to start due to the following error:
%%2

Error: (01/19/2015 08:48:19 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 22:01:29 on ‎18/‎01/‎2015 was unexpected.

Error: (01/18/2015 09:49:34 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom

Error: (01/18/2015 09:49:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MSI_FastBoot service failed to start due to the following error:
%%2



Report •

#68
February 24, 2015 at 23:54:29
Speedstepping is also called EIST, and you may see C, P & G-states referred to in bios options.

Or,

Under Control Panel – open Power Options
Under the Power Schemes pull down menu
To turn Enhanced Intel SpeedStep Technology ON select, “Minimal Power Management,” power scheme.
To turn Enhanced Intel SpeedStep Technology OFF select, “Always On,” power scheme.
To verify that Enhanced Intel SpeedStep® Technology is enabled do the following:
Close all applications and ensure that Microsoft Windows* OS is in idle mode.
Press Ctrl + Alt + Delete and select the Performance tab. Verify that CPU usage is 0%.
Right click My Computer and select, “Properties.”
Under the General tab examine the installed processor and speed. If Enhanced Intel SpeedStep Technology is enabled, two processor speeds will be listed. The first speed listed is the specified speed of the processor. The second speed is the current operating speed. The second speed will be less then the 1st speed. This indicates that Enhanced Intel SpeedStep Technology has effectively lowered the processor voltage and core frequency, which can (depending on system usage and design) result in decreased average power consumption and decreased average heat production. If Enhanced Intel SpeedStep Technology is off then both processor speeds will be equal.

Or,

How to turn off SpeedStep in Windows 7?
http://superuser.com/questions/7257...


Report •

#69
February 24, 2015 at 23:56:31
How long does it stay on? Long enough to boot to windows?

Seems like a hardware problem. Try temporarily removing any add-on cards you may have installed and any USB devices. Try disconnecting the drives. (While working inside the case make sure you have the power cord disconnected) Then start it up and see if it does the freeze--restart cycle.


Report •

#70
February 25, 2015 at 10:12:11
It does boot windows and then about 5 - 10 mins later it loses power(or at least looks like it loses power)

Theres no cards installed one drive(ssd boot drive) and only usb devices are keyboard and mouse which are both fine.

message edited by Azzza42


Report •

#71
February 25, 2015 at 10:41:14
Bound to be way too simple but when it is working try waggling the power cord about at each end to see if that suddenly stops it. Just a vague possibility that you have a bad connection due to either the power cord itself or one of the connections at either end. If you have a spare cord give it a whirl.

Always pop back and let us know the outcome - thanks


Report •

#72
February 25, 2015 at 11:08:04
Gonna try all the suggestions at the weekend (re-doing the os will be the last resort.)

Report •

#73
February 25, 2015 at 14:12:56
"Gonna try all the suggestions at the weekend"
Ok.

Download the latest version of Farbar and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Run Farbar again please, follow this SS & upload the 2 new logs.
http://i.imgur.com/i3fg3Pf.gif


Report •

#74
March 3, 2015 at 09:04:25
UPDATE: Tried to re-install OS via USB and the whole thing crashed whilest I was installing windows. Defiantly a hardware issue I'm guessing, wasn't able to do the far bar test as I had no OS.

Report •

#75
March 3, 2015 at 09:24:16
I can also confirm that it a completely different power supply that is now in my system and not the original psu.

Report •

#76
March 3, 2015 at 20:03:12
The word 'crash' isn't helpful as it can mean just about anything. What exactly is happening? Also, without my having to go through all the above posts again, why are you attempting the reinstall from USB instead of the DVD?

Report •

#77
March 3, 2015 at 23:47:30
By crash I mean, the screen goes black as if I just turned the computer of at a the mains, and I'm installing via USB as I don't have a disk drive.

Report •

#78
March 4, 2015 at 00:58:36
We're assuming the power supply is adequate for the machine requirements and is correctly connected.

If your power supply has a 115/230 voltage switch on the back make sure it's in the correct position. DON'T GUESS and if you change it make sure the AC cable is unplugged when you do it.

Could it be a power interruption in your house's AC wiring or if it's attached through a UPS could there be a problem there? Could the computer's power cord be somewhat loose and momentarily disconnecting?

I guess all the cooling fans are free of dust and spinning freely?

Other than that it sounds like a momentary short. Could the motherboard be loose in the case and perhaps touching a ground somewhere?


Report •

#79
March 4, 2015 at 10:43:28
Doesn't have a voltage switch, from uk supplier shipped with uk plug

Can't be the house as I boughht a anti-surge socket, works fine with another pc on it.

Cooling fans are spinning & temps of system & cpu are good

If it was a problem with the wiring then the system would crash randomly, but it seems to be around 10 min for the first crash and then 1 min for every subsequent crash.

The mother borad is not lose, 100% sure of that.

As for is it getting grounded if this were the issue it would short out at a regular interval right, (mine gos 10min, 1 min, 1min.....)

Spoke to my computing teacher is suspects it could be either a bad block in the ram( I have checked the ram, one at a time in both slots, still crashed every time) or a bad CPU or the Motherborad.


Report •

#80
March 4, 2015 at 12:14:25
"the screen goes black as if I just turned the computer"
I assume you checked out #71?

Always pop back and let us know the outcome - thanks


Report •

#81
March 4, 2015 at 12:22:00
Yeah I did, all wire pulled and shaked (except sata,audio & usb)

Report •

#82
March 4, 2015 at 18:54:12
✔ Best Answer
Cpu heatsink and fan properly attached? Not likely the cpu itself since it works some time. Maybe the motherboard. I can't think of anything else.

message edited by DAVEINCAPS


Report •

#83
March 4, 2015 at 19:02:09
Further to #82, did you use the "exact" thermal compound application method "specified for your particular CPU"? There are about three different methods.

Always pop back and let us know the outcome - thanks


Report •

#84
March 4, 2015 at 23:58:03
It's an corsair h75, there was thermal paste already applied, and it is installed correctly

Report •

#85
March 16, 2015 at 12:24:46
any new ideas guys?

Report •

#86
March 16, 2015 at 13:01:12
In desperation, some general stuff (much of which has already been covered):
http://www.thewindowsclub.com/how-t...

Always pop back and let us know the outcome - thanks


Report •

#87
March 16, 2015 at 14:37:38
You mentioned earlier that you had another computer. Is that RAM in the problem rig compatible with it? If you could try putting the RAM from the problem PC into your other one and running Memtest86 or Windows Memory Diagnostic there we can hopefully rule out one piece of hardware.

Report •

#88
March 16, 2015 at 21:23:46
Remove graphics card and use onboard graphics if available.
Try replacing all cords and plugs including: power cord from surge protector to power supply, monitor cable, SATA power cables, use different SATA and other power connectors, and anything that might have an intermittent connection.
Remove and reinsert all other connectors 3 or 4 times to overcome possible tarnishing of surfaces.
Make sure that all motherboard posts are in place and have a screw securely tightened in each one. Make sure that there are no other posts under the motherboard in places that there are no screw holes for them.
With a strong light, look carefully at the motherboard power connectors to be sure that all of the wires are fully into the back of the connectors and are not being pushed out the back of the connectors (not fully inserted).
As a last resort, pull the motherboard and flip it over, then look at it carefully under good light for solder joints that are dull, not smooth, or not completely surrounding the wire or post. Especially look at where power connectors and rear panel mounts are soldered to the motherboard. Any poor solder joint can give intermittent connection and break the connection when things get warm. They would also appear to get worse over time as tarnish effected the component and the board.
Another thought: if the power supply you used and replaced are the same make and they are not of the highest quality, they could have the same problem (though remotely possible) so if you have a proven working power supply from another machine, you may want to try that as well as a test.

You have to be a little bit crazy to keep you from going insane.


Report •

#89
April 18, 2015 at 03:49:53
System crashed (power cut to system then it rebooted) halfway through the Memtest86

Report •

#90
June 27, 2015 at 05:58:53
UPDATE: Changed MoBo to a GIGABYTE Z97N-Wi-Fi
It seems to be working!!!

Report •

#91
June 27, 2015 at 13:27:07
Hopefully that fixes it. Thanks for posting back.

Report •

Ask Question