Please help, restarts, serious errors, Ntfs.sys problems

[monk2706]

Hi
please would someone be able to help me I have a big computer problem but haven't much of a clue about computers.

It started a couple of weeks ago when my computer would restart for no apparent reason whether on the internet, playing a game or doing anything really. When the computer restarted on its own I would get 'this system has recovered from a serious error' message.

When I looked in the technical info that would be sent to microsoft it had the following 2 files in it:

C:\windows\minidump\mini080504-01.dmp
C:\docume-1\richar-1\locals-1\temp\wer11.tmpdir00\sysdata.xml

I checked out the application and system errors in event viewer.
Whatever the errors were had an event id of 1003 in the system part of the event viewer and event id 1007 in the application part of the event viewer.

The system error with event id of 1003 has a description as follows:

error code 10000050, parameter 1 dcdb8616, parameter2 00000000, parameter3 f83d9043, parameter4 00000000

The application error with an event id of 1007 has a description saying the following:
windows cannot determine the associated site for this computer(The RPC server is too busy to complete this operation). Group policy processing aborted

Someone told me to switch off auto restart to get a better error message that could show the problem. I did this and the next time the computer restarted I got this message on a blue screen:
--------------------------------------------------------------------------
A problem has been detected and windows has shut down to prevent damage to your computer

The problem seems to be caused by the following file : Ntfs.sys

PAGE_FAULT_IN_NONPAGEDAREA

Technical info:
***STOP: 0x0000050 (0x8A010FFD, 0x00000001,0xF85D8FC3, 0x00000000)

Ntfs.sys - Address F85D8FC3 base at F85C9000, Datestamp 3d6de5c1
--------------------------------------------------------------------------
Then a few hours after doing this all sorts of things started to go wrong with my computer for no apparent reason.

Firstly, all of a sudden, search and run would not work in the start menu (I click on them and nothing happens) and although I can get to control panel, none of the items inside control panel (such as system etc) are clickable.

So I restarted my computer and had a black screen and an exception message. I restarted my computer again and this time it got to windows. I went on the internet to try and find some help but then got the following message:
--------------------------------------------------------------------------
'This system is shutting down this shutdown was initiated by NT authority/system'

C:\windows\system32\services terminated unexpectedly with status code 128
--------------------------------------------------------------------------
Everything just freezed so I had to restart my computer.

Then I found after this restart that not only would control panel, search and run not work in the start menu but also outlook express had changed appearence. It now looks like a .exe file I think, it is a white box with a blue line across the top and when I click on it it says:
--------------------------------------------------------------------------
The item msimn.exe that this shortcut refers to has been changed or moved so this shortcut will no longer work properly
nearest match based on size, date and type:
c:\programfiles\internetexplorer\iexplorer.exe

Do you want to fix this shortcurt to point at this target or do you just want to delete it.
--------------------------------------------------------------------------
So I can't get in to my outlook express now eithier.

Then system restore has become unclickable in my start menu and I have tried system restore in safe mode loads of times but it always crashes halfway through with the 'this system has recovered from a serious error message'

I have now noticed that when I right click an object not all the options are there such as 'open with' has dissappeared and 'send to' has dissappeared, when I right click my desktop (to look at properties and screen resolution for example) nothing happens also when on the internet all the pages I have open will sometimes close for no reason and my dial up connection appears asking me if I want to disconnect from the internet.

And that is where I am now.

I know it is a lot to ask but I would be really grateful for any help whatsoever because I really don't know what I am doing.
It seems that something is going wrong every second can someone please advise me as to my best course of action?

Please help

[rebon]

Well you got some probs there mate .
First thing if you can is clean your pc of virus and spyware, if you want free tools to do this go here tech section. I would recommend spybot, ad-aware, cwshredder and hijackthis to kill spyware and hijacks. AVG for virus plus the online scanners are good.

Then go here to repair windows xp.

Also you may try this>

How to go about Repairing Windows XP
1. Put your Windows XP Install CD into your CD-ROM drive.
2. Reboot your computer.
3. Let your system boot off of the CD.
4. Let the Setup go through the first part of the Installation procedure.
5. When you come to the screen in which it says "Welcome to Setup." press Enter to Setup Windows XP.
6. Press F8 to agree to the End User License.
7. Let the Setup search your system for previous versions of Windows.
8. When the Setup is finished searching your system, select your Windows XP Installation and press the R key on your keyboard to start the Repair Procedure.

This is the part that might make you nervous . The Setup will delete all major system files and then replace them with new copies.

You will have to download all of the updates from Microsoft Windows Update again because it replaces the files.

Don't worry, your user data is still intact. Nothing has been lost, nothing has been deleted. Your data is safe, just the OS has been repaired, so relax.

There is nothing to worry about as long as you follow the steps to repairing Windows XP.

That should keep you busy for a while.


good luck.

[DougL]

Sounds like you have a combination of the SASSER and BLASTER viruses, as Rebon said some major work is required. Another good site is www.sarc.com the Symantec site with information and removal tools.

[DougL]

Forgot to say the to stop the system shutting down you can type in "shutdown -a" without the quotes at the run command.