Display shuts off, lost signal, widows freezes, tower stays running.

[Atemup]

I've always thought it seemed like a really sophisticated piece of malware and I just found someone else's sort of solution on a Nvidia forum thread that says it's a trojan called iehighutil.exe. I read that The iehighutil trojan is a java exploit that hijacks our gpu's to mine for bitcoins. If this is not the exact culprit I bet it is something similar.

 

[ICIT2LOL]

Ok mate try running this it will scan from power up and "look" at just about everything without involving Windows. http://support.kaspersky.com/4162 there is plenty of other scanners to use as well but try this one first

PS I will message you - look at the top of your screen page you will see it under notifications

 

[Atemup]

Thank you and I understood what you were saying. I'm bringing my rig to work today so my IT guy can see if he can dig out a Trojan or rootkit, if that's the case.
Thanks for all your help, I'll keep you posted!

 

[ICIT2LOL]

Thank you and I understood what you were saying. I'm bringing my rig to work today so my IT guy can see if he can dig out a Trojan or rootkit, if that's the case.
Thanks for all your help, I'll keep you posted!

No probs my friend and if you ever want to do that yourself you can use one of these (the TDSS Killer is the one usually recommended) Best Free Rootkit Scanner and Remover

 

[Atemup]

The IT guy didn't have time to get to it today so looks like I will be attempting this myself. Although I haven't seen any signs of this malware on my PC in the usual places that others have. I wonder if it's the same type of malware but from a different publisher or maybe better hidden.

 

[Atemup]

No threats found with TDSS Killer, maybe I'm not using it right?

 

[ICIT2LOL]

No mate you are using it right it just didn't find anything and to date you have been doing well to stick with it and I for one find that a real plus.

Now I went back to that virus you mentioned at the start and did some searching and this is typical of a lot of the responses Heads-up for PC Gamers -- new malware iehighutil.exe will FRY your GPU via Java - Guru3D.com Forums it is worth a try disabling the Java if you have got it I don't use it except for one machine which I have to because my employer uses it and I cannot access my pay office without it or I would get rid of it altogether.

Just disable and see what happens as for getting rid of that virus maybe it requires you to uninstall Java as well.

NB Did you get my message??

 

[Atemup]

A game that I installed recently didn't initially work, is now running properly (1900x1080p 60fps, high graphic settings) as of this morning. I thought it was fixed but still shuts down on every other game. I've installed an older nvidia driver (314.22/ just to try to see if older drivers were somehow immune),uninstalled JAVA and did scans with combofix and TDSS Killer in safe mode. I have yet to try and repeat the issue as I have before. I thought I'd see how long this game goes before going out. Switching between 2 unconventional monitors and different graphical settings. I thought maybe figure out why only this game works would provide some insight.

 

[Atemup]

"Got it" I did get your message,I forgot to add the "got it" Thanks for all your help thus far, you have really good advice and I appreciate it. That HWiNFO is an awesome tool "just because" haha ,thanks for the link!

 

[Atemup]

That didn't last long....it has shut off again.

 

[ICIT2LOL]

Yes that HW Info is good although it has been known for it to read incorrectvoltages but not whenever I have used it.

The features I like are the running info and then being able to open outeach component with such in depth detail.

Now I have just stumbled over something while looking at your system specs again and I see you are using an AV called Advanced Systemcare Ultimate 7 now I looked it up because I am not familiar with it and low and behold it is an Iobit program. Now I am getting very strong vibes as to your problems might be coming from that direction as Iobits is thought by many to be suspect software and the one tie I tried it I ended up doing a system reinstall to get rid of it. That is before I got a little more into it and found other ways.
Now it is your decision but if it were me I would be dumping that software or at very least disabling it again as I said I am not familiar with that particular program, but Iobits I personally not have anywhere near my machines.
If you want a good AV then there are plenty of free ones around and even the paid for ones are not really that expensive my Kaspersky for example costs $0.13 a day but that is at full price and one can get deals on any off them. But take a look at these
Probably the Best Free Security List in the World - Part I < page 2 and I keep this site as a good reference link too for all sorts of stuff

 

[Atemup]

It was recommended to me by my IT guy at work. I uninstalled it prior to running the malware scans.

 

[Atemup]

I'll still let a professional take a look but without any malware detected I'm back to thinking it could be psu or driver issues, what do you think?

 

[Atemup]

Will HWiNFO record my pc during display lost and force shut down? If I could see exactly what's going on during this it might explain something.....

 

[ICIT2LOL]

Well it could still be a PSU problem even though the volts came up ok but who knows what is going on?

The HW Info recording what is going on when the shut down is on I ma not quite sure what you mean but if you mean does it still run without a screen I don't see why not.

Perhaps a look at the event viewer might throw up some insights into what th dickens is going on.

Type Event viewer in the Start window and it should throw up Event Viewer in a blue box at the top run it and scroll through and look what has been going on.

Scroll down in each section see pic

 

[Atemup]

After the screen shuts down I can only bring it back with a force shut down, and when I bring windows back up the H.W. info has reset the information on it. I was just wondering if there is a similar program that would store the info so I can go back and look at it?...

 

[Atemup]

I'll try event viewer

 

[Atemup]

I Event Viewer I found this:

Cryptographic Services failed while processing the OnIdentity0 call in System Writer Object.

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
The parameter is incorrect.

 

[ICIT2LOL]

Ok mate will have to have a dig around this one as it is not familiar to me. Just hang in there.

NB Ok found this can you go through this and see what it reads? A snip of the readout would be good http://www.vistax64.com/tutorials/148532-how-use-snipping-tool-vista.html

I have had a look in my own registry and that is how it should look just one thing before you do anything in the registry back it up I do after every clean install and before I make any slight changes that even I know are safe.
http://www.sevenforums.com/tutorials/4230-registry-backup-restore.html ( I make two copies - OCD)

 

[Atemup]

Reinstalled windows from disk and swapped graphic cards and the issue still persist. I'm now thinking its a bad motherboard.