Bccodes

[Bacchus_whine]

Good morning all. I just built a new PC and installed Windows XP, McCafee, Company of Heroes, COH patches, and Bioshock. This morning the new pc was rebooting about 50% of the time on logins. After getting sucessfully in after repeated attempts I got a serious Windows error message. See attched thumbnail for Bccodes. can anyone tell me how to fix this? I'm pretty much a newb.

HIS 1 GB 4890 PCI Express 2.0 X 16 Video Card
AMD Phenom II X4 945 Denab 3.0 GHZ Socket AM3 Quad Core Processor
Antec Nine Hundred Black Steel ATX Mid Tower Computer Case
Gigabyte AMD 790X ATX Motherboard
Corsair 650 Watt ATX Power Supply
Western Digital Caviar Black 640GB 7200 RPM
G. Skill 4GB (2 x 2GB) DDR2 SDRAM Memory Model

[glc]

That tells us nothing.

What you need to do is start it in safe mode, then go to control panel, system, advanced, startup and recovery settings, and uncheck "restart on error". This will give you a bluescreen instead of a reboot, and you can get much better clues from what it says on the bluescreen. Google search on the stop error code when it happens.

One of the first things I'd do is get rid of McAfee.

[Bacchus_whine]

Originally Posted by glc That tells us nothing. What you need to do is start it in safe mode, then go to control panel, system, advanced, startup and recovery settings, and uncheck "restart on error". This will give you a bluescreen instead of a reboot, and you can get much better clues from what it says on the bluescreen. Google search on the stop error code when it happens. One of the first things I'd do is get rid of McAfee.

I made the change for the restart. The problem did not arise again over 8 seperate logins, its weird how it is only at the login and then only about 50% of the time. I got some event logs. Would that tell me anything?

Who would you recommend outside of MCAfee?

[glc]

Free AVG, Avast, or Avira.

Yes, event logs MIGHT help.

[Bacchus_whine]

Here are some of the event logs I've received.

Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 7/16/2009
Time: 7:23:17 PM
User: N/A
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 7/16/2009
Time: 8:43:03 PM
User: NT AUTHORITY\SYSTEM
Description:
The server {5A90F5EE-16B8-4C2A-81B3-FD5329BA477C} did not register with DCOM within the required timeout.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 7/17/2009
Time: 7:54:28 AM
User: N/A
Description:
Error code 1000007e, parameter1 c0000005, parameter2 a937e23a, parameter3 b9dbba98, parameter4 b9dbb794.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 37 1000007
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 61 39 33 37 65 32 33 61 a937e23a
0040: 2c 20 62 39 64 62 62 61 , b9dbba
0048: 39 38 2c 20 62 39 64 62 98, b9db
0050: 62 37 39 34 b794


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 7/17/2009
Time: 9:26:58 AM
User: N/A
Description:
Error code 1000008e, parameter1 c0000005, parameter2 a937e23a, parameter3 ba5130a0, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 61 39 33 37 65 32 33 61 a937e23a
0040: 2c 20 62 61 35 31 33 30 , ba5130
0048: 61 30 2c 20 30 30 30 30 a0, 0000
0050: 30 30 30 30 0000

[glc]

That's actually pointing toward malware. I'd do a full virus scan, and a full scan with Malwarebytes.

[MrDravenX]

Originally Posted by glc That's actually pointing toward malware. I'd do a full virus scan, and a full scan with Malwarebytes.

You just built this system and already might have a malware problem? What have you been doing? If you have been on the web, you might want to be more cautious to the sites you have been to since you built the pc.

[Bacchus_whine]

Originally Posted by MrDravenX You just built this system and already might have a malware problem? What have you been doing? If you have been on the web, you might want to be more cautious to the sites you have been to since you built the pc.

I downloaded some patches thru a Peer to Peer Relic (COH company) downloader for Company of Heroes. Outside of that, it would seem to be a random attack?

[Bacchus_whine]

Here is the Malwarebytes log. Does the registry items infected mean anything to anyone?



Malwarebytes' Anti-Malware 1.39
Database version: 2461
Windows 5.1.2600 Service Pack 3

7/18/2009 8:36:38 PM
mbam-log-2009-07-18 (20-36-38).txt

Scan type: Full Scan (C:\|)
Objects scanned: 125723
Time elapsed: 12 minute(s), 26 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[glc]

Those are McAfee byproducts. Have you uninstalled it yet?

[Bacchus_whine]

Originally Posted by glc Those are McAfee byproducts. Have you uninstalled it yet?

No MCAfee is not uninstalled yet. I'm still trying to figure out which way to go with the security software.

I've received 2 blue screen recently.

Stop 0x0000008E, portcls.sys address A927E23A

and most recently

a Stop 0X0000007E, portcls.sys address A927E23A (maybe a Realteck audio driver issue?)

[glc]

http://www.microsoft.com/downloads/d...DisplayLang=en