PANIC LOG - CPU 0 Called - Please can someone interpret for me?

Question

I'd appreciate anything you can enlighten me with - I've recently lost everything to a rootkit. The people at Mac Store wouldn't believe me Here's the panic log when it restarted by itself last night - I was not connected to the net and I've now zero'ed all but the 1/4 of my hard drive which is a damaged partition from the constant attempts to restore it.
Sat May 22 13:35:59 2010
Machine-check capabilities 0x0000000000000806:
6 error-reporting banks
threshold-based error status present
Machine-check status 0x0000000000000005
restart IP valid
machine-check in progress
MCA error-reporting registers:
IA32MC0STATUS(0x401): 0xb200004000000800 valid
MCA error code : 0x0800
Model specific error code: 0x0000
Other information : 0x00000040
Threshold-based status : Undefined
Status bits:
Processor context corrupt
Error enabled
Uncorrected error
IA32MC1STATUS(0x405): 0x0000000000000000 invalid
IA32MC2STATUS(0x409): 0x0000000000000000 invalid
IA32MC3STATUS(0x40d): 0x0020000000000000 invalid
IA32MC4STATUS(0x411): 0x0000000000000011 invalid
IA32MC5STATUS(0x415): 0xb200221024080400 valid
MCA error code : 0x0400
Model specific error code: 0x2408
Other information : 0x00002210
Threshold-based status : Undefined
Status bits:
Processor context corrupt
Error enabled
Uncorrected error
panic(cpu 0 caller 0x001A42CB): Machine Check (CPU:0, thread:0x3985f78, trapno:0x12, err:0x0),registers:
CR0: 0x8001003b, CR2: 0xa0006110, CR3: 0x00ea7000, CR4: 0x000006e0
EAX: 0x250abbb8, EBX: 0xc9913471, ECX: 0xc98049d4, EDX: 0x0000009a
ESP: 0x250abba0, EBP: 0x250abbe8, ESI: 0x0000009a, EDI: 0x00000001
EFL: 0x00000206, EIP: 0x001a2e79
Backtrace, Format - Frame : Return Address (4 potential args on stack)
0x439d58 : 0x128d0d (0x3cc65c 0x439d7c 0x131f95 0x0)
0x439d98 : 0x1a42cb (0x3d27fc 0x0 0x3985f78 0x12)
0x439f58 : 0x19c103 (0x439f70 0x0 0x0 0x0)
0x250abbe8 : 0x1a367a (0x2a5 0x1 0x250abc28 0x127ee8)
0x250abbf8 : 0x127ee8 (0xc9913471 0x9a 0x250abc18 0x19f6b1)
0x250abc28 : 0x127f0d (0x2710 0x3e8 0x10 0x3823f5c)
0x250abc48 : 0x1ab0f2 (0x2710 0x0 0x1 0x19a4f1)
0x250abc78 : 0x132e2c (0x1 0x3e3cc30 0x0 0x20)
0x250abcc8 : 0x3ac3d0 (0x352b3000 0x4b063c 0x3 0xb000)
0x250abd08 : 0x3bb728 (0x388a600 0x3f2688 0x38aee48 0x3920b5)
0x250abd48 : 0x394a8f (0x38aea00 0x4 0x1d 0x2)
0x250abd88 : 0x394fc5 (0x38aea00 0x0 0x250abdc8 0x0)
0x250abda8 : 0x395ea4 (0x38aea00 0x3804c00 0xb 0x1)
0x250abde8 : 0x394fee (0x38aea00 0x3900200 0x250abe28 0x0)
0x250abe08 : 0x395ea4 (0x3900700 0x3804c00 0xb 0x1)
0x250abe48 : 0x394fee (0x3900700 0x394e980 0x250abe88 0x0) Backtrace continues...
Kernel version:
Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386

Answer 1

BDAqua -
Thanks for your reply. I was in such a hurry when I first posted this log, that I tried to cram too much information in to the little paragraph which preceded the panic log.
A month or so ago, I was on a website for a local DVD store where you book first then go and collect them from the express store closest to you. I found it strange that I got a pop up window telling me that (words to the effect) The Vendor is using an out of date version of xxxx.xxx, remind them to install newest version. (xxx.xxx = unfamiliar program and string of letters after it). I dismissed the error and went to keep browsing the DVD online catalogue. It's unknown to me, as I said - first time I'd used their service, at the recommendation of my friend who was next to me, she's the member.
My computer (which had an external Hard Drive connected to it at the time) became completely unresponsive and froze for several minutes, resumed fine and froze again. I had no option but to restart it.
I disconnected my external Hard Drive whilst it was turned off, and restarted. When I rebooted, my computer was blank. Then, frame by frame, the windows returned. I watched as they popped in to the display, again I've never seen graphics like it. The OS started and was on the screen, but I couldn't interact with it. Then I had the grey screen saying I needed to restart the computer. I was still connected to the internet for this whole time, I hadn't put any thought in to it being an issue.
I tried to restart the computer several times and it came up with the grey screen each time, telling me to restart it. I used a friend's 10.5 Disc to boot off and the Verify/Repair in Disk Utility returned no changes, reported the HD was fine.
I took it home and over the next few days, continually came up against the same grey screen or cd-boot options. There seemed to be no option but to wipe it and start again. I'd had this computer for 4 straight years without a single issue until this point.
I decided to forfeit the content of my Hard Drive as I knew I had a back up (on the External HD which was connected at the time of the initial crash).
I could not zero the disk before installing again, I tried 4 or 5 times and it would freeze every time around 14 mins remaining in the task. So, I chose the quick install option. Bad move.
I got the system up and running again, knowing that if I wanted it, at this point, something like Disk Warrior or a similar third-party program to assist in possibly rescuing some of my Data. I decided to let it go. Done, I thought - phew. I connected to the 'Net in order to do the long sequence of required updates using Software Updater. Only two hours or so in to this (boring) process, when my computer screen faded in front of me. Just when I thought it was unresponsive, my screen displayed a very retro looking OS, like something I saw as a teenager in highschool, it was Mac but it was very very old.
Then the fright of my life when the pointer began moving by itself, closing the updater windows and opening various other things and closing them. Then the Terminal screen appeared, typing appeared as if someone was on the other side of the room playing some joke on me (I was at home, no pranksters there) - then it shut down. I restarted it, and it started with a grey screen with a highly detailed cartoon image of a world globe in the middle, and as I tried to move the cursor, the world thingo started to spin slowly. The more I tried to get a pointer to appear, the faster the world thing would spin in the middle of the screen.
The grey screen gave way to the UNIX command screen, it looked like what you get if you start in Single User Mode. (Which I've only done since this stuff happened, I didn't know it existed before)
I didn't (do now!) know any basic commands in that language, all I knew was I didn't know what I was doing and not to mess with it. So I forced it to power off. When I restarted it, my hard drive and CPU fan began to run very fast and the OS was unresponsive to ME - but it was doing things as if someone else had my mouse. The more I tried to get the pointer to do what I wanted, the faster the selections it made seemed to get. It got so frantic and fast that I can't even tell you what it was opening, things were being written in the Terminal/Unix language, the mouse was opening/closing windows, dragging things to trash, highlighting certain folders and changing Permissions - I freaked right out. I didn't know what to do, the HD was going so hard and fast, and all I had was a computer that seemed to be controlled by anyone else.
I'll stop here because I know this is getting long - I contacted the online DVD store at their Headquarters and described what had happened, leaving absent that since then I'd lost everything as I couldn't be sure what caused it, I can only milestone the events around it with the very odd error message which I clicked to dismiss.
They've since contacted me several times to enquire about any consequences re my computer, if any. At this point I asked them several questions and they finally admitted that their site was compromised for 72hours and yes, it was a malicious script on their page and they were aware of 39 other cases where Mac users had suffered "catastrophic data loss". They've since offered to have my computer serviced etc. I'm undecided on their integrity and have had it looked at privately, I told my Local Geeks about the correspondence with the DVD rental company, and the two parties communicated. Later, I was told it was confirmed to be a rootkit which had inserted and activated almost simulaneously, which is apparently an unusual thing. And yes, it was the dodgy webpage.
I'm too scared to plug my External HD in again, for fear I've lost all of my back up.
That's how I know I'd been hit by a rootkit.
This latest post is referring to the error message I received this morning.
After the massive fail described above, I had the Local Geek company look at my computer to find what had happened, zero the disk and reinstall my OS X 10.4 from the disk which came with the computer. To be honest, I couldn't justify anything beyond that - and I don't have a great deal of flash cash to burn.
I haven't had a problem since, although I am only just starting to realise how much I've lost. The computer was given back to me with three partitions (also foreign concept to me), and the last quarter has been unwritable since I got it reinstalled by Local Geeks. (Yes, that's a business name)
I didn't think much of it, that third partition no longer mounts and Disk Warrior confirms it's damaged beyond repair. The first error message said it was physically damaged from too many attempts to write to it in a particular sector, the second time I asked it to run its tests, it told me that part of the HD has an error which can't be fixed, something to do with B-tree/nodes.
As I said, I haven't thought much about it, I have a computer back and oh well it's a section of HD space I can't use - I don't have any data left to put back on it anyway.
Then, I got this error msg today when I started it up. This is why I have asked you for advice, I'm only sorry I couldn't give you more background earlier, I just rushed it to hopefully get replies by the time I got back.
I'll run the Hardware diagnostic on 2nd disk, but I fear it'll stall on the damaged part of my HD - do you think this is still best action? What does "Called on CPU 0" mean, etc?
I hope the background makes sense. It was surreal and very upsetting to see my computer being controlled by something/someone else. Not to mention losing everything.