If geeks love it, we’re on it

Howdy, Stranger!

You found the friendliest gaming & tech geeks around. Say hello!

My Fix for the STOP: 0x0000008E (0xC0000005... BSOD / REBOOT

trolltroll Windsor, Nova Scotia Icrontian
edited Apr 2012 in PC Building
Update: May 2011

Icrontic recommends updated security software from ZoneAlarm, Avira, Trend Micro, Symantec, F-Secure, Kaspersky, or AVG.

This official Icrontic guide summarizes and replaces the info in this discussion: Fix the 0x0000008E BSOD once and for all


Greetings & Salutations!

For the past two days I have worked on two machines at the shop that would just reboot on thier own, after shutting off the Automatic Restart option. That wonderful STOP: 0x0000008E (0xC0000005... BSOD appeared on the screen.

(Both machines worked fine till the users "Opened a file they received through msn messenger" :banghead: )

Safe Mode works fine, just reboots in Normal Mode.

From safe mode cmd prompt only I scanned with F-Prot, Ad-Aware, SpyBot & HijackThis... All things cleaned up or shutoff...
(Norton was on one of the machines but it was not working and you didn't have enough time to check anything in Normal mode.)

Rebooted and within a few minutes... STOP: 0x0000008E again... rebooted in safe mode again shut everything off in MSConfig, ran Rootkit Revealer from sysinternals which found nothing... rebooted and same BSOD again...

Searched Google for 0x0000008E errors and got the standard, "Ram problem, Driver Problem, PS Weak... Tested Ram with memtest, changed the power supply and still no go...

Another site was talking about posting minidumps for them to look at, so I looked into one of the minidumps and found:

Rustock rootkit v 1.2
Z:\NewProjects\spambot\new\driver\objfre\i386\driver.pdb


A little more Google revealed that this Rootkit, once installed is undetectable by anything, quite the amazing little piece of code...

Symantec's info on the Rustock Rootkit

This was it the B version... I followed the directions on Symantec's site to remove it by booting into recovery console from an XP CD. (You cannot detect it in Safe Mode)

Once there I used "Disable pe386" to shut off the rootkit... I looked while in safe mode for this service and it WAS NOT there... Since it loads with kernel / driver data, it hides everything about itself...

Symantec's Cleanup Instructions...

Rebooted in Normal mode and no more BSOD, reinstalled NAV and started it scanning when I left the shop... I will run ADSSpy again and see if it finds the alternate data stream now...

I realize that this is not the only cause of 0x8e errors but this was my problem, and since there were two machines in the shop with the same problem, I can see more of these coming in for repair...

Hope this helps those who have just recently developed STOP: 0x0000008E errors.

troll
«1345678

Comments

  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Oct 2006
    Looks like some great research, troll. I'm sure you will help a bunch of people with this well-written guide. :thumbsup:
  • ThraxThrax Professional Shill, Pokémaster, Watch Slut Austin, TX Icrontian
    edited Oct 2006
    Sticky! Sticky!
  • edited Oct 2006
    Hello, I also think this was really well written, I understood it!, mostly... I recieved the same error a month or so ago and couldn't get windows running again, so here is what I did, and i need some help at this point. I have a BYO system I can go into detail if you want. It had a 120g hard drive partitioned 70/40/10, with the 10 unpartitioned(for emergencies). I just partitioned the 10g and reinstalled windows on that, mainly to be able to recover info from drive c: and d:. Now here is where I am running into trouble. Trying to recover info off of drive c: makes the system reboot. If I have the problem as stated above, how do I deal with it in this case, and what is a minidump, how do I do it and is it easy to read and understand? I am an average do-it yourselfer and have some decent system repairl knowledge but I am not a professional, nor do I have any schooling for this kinda stuff. Please I need some help!!!!!

    TIA, Paul
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Oct 2006
    toothmkr57 said:
    ...what is a minidump, how do I do it and is it easy to read and understand?...
    It will (try to) record what was going on when your computer crashed and save it to a text file. By studying the file you'll at least get a list of likely suspects as to what caused the crash.

    From Microsoft:
    To configure startup and recovery options to use the small memory dump file, follow these steps.

    1. Click Start, point to Settings, and then click Control Panel.
    2. Double-click System.
    3. Click the Advanced tab, and then click Settings under Startup and Recovery.
    4. In the Write debugging information list, click Small memory dump (64k).
    The file created should appear in the root of the drive where Windows is installed. As for being "easy to read and understand", it may be, but it might just look like gibberish unless you know what you're looking for. You can attach a copy of the dump file here and we'll have a look.

    You could also try right-clicking My Computer, then go to Properties>>Advanced>>Startup and Recovery Settings, then uncheck Automatically Restart.
    It will produce a BSOD with an error code. Let us know what it is and we'll try and help. :)
  • LenLen Woodstock, near Oxford, UK
    edited Oct 2006
    troll said:
    Greetings & Salutations!

    For the past two days I have worked on two machines at the shop that would just reboot on thier own, after shutting off the Automatic Restart option. That wonderful STOP: 0x0000008E (0xC0000005... BSOD appeared on the screen.

    (Both machines worked fine till the users "Opened a file they received through msn messenger" :banghead: )

    Safe Mode works fine, just reboots in Normal Mode.

    From safe mode cmd prompt only I scanned with F-Prot, Ad-Aware, SpyBot & HijackThis... All things cleaned up or shutoff...
    (Norton was on one of the machines but it was not working and you didn't have enough time to check anything in Normal mode.)

    Rebooted and within a few minutes... STOP: 0x0000008E again... rebooted in safe mode again shut everything off in MSConfig, ran Rootkit Revealer from sysinternals which found nothing... rebooted and same BSOD again...

    Searched Google for 0x0000008E errors and got the standard, "Ram problem, Driver Problem, PS Weak... Tested Ram with memtest, changed the power supply and still no go...

    Another site was talking about posting minidumps for them to look at, so I looked into one of the minidumps and found:

    Rustock rootkit v 1.2
    Z:\NewProjects\spambot\new\driver\objfre\i386\driver.pdb


    A little more Google revealed that this Rootkit, once installed is undetectable by anything, quite the amazing little piece of code...

    Symantec's info on the Rustock Rootkit

    This was it the B version... I followed the directions on Symantec's site to remove it by booting into recovery console from an XP CD. (You cannot detect it in Safe Mode)

    Once there I used "Disable pe386" to shut off the rootkit... I looked while in safe mode for this service and it WAS NOT there... Since it loads with kernel / driver data, it hides everything about itself...

    Symantec's Cleanup Instructions...

    Rebooted in Normal mode and no more BSOD, reinstalled NAV and started it scanning when I left the shop... I will run ADSSpy again and see if it finds the alternate data stream now...

    I realize that this is not the only cause of 0x8e errors but this was my problem, and since there were two machines in the shop with the same problem, I can see more of these coming in for repair...

    Hope this helps those who have just recently developed STOP: 0x0000008E errors.

    troll
    Hi troll: MANY thanks for the "pe386 fix". It brought to an end many hours of fruitless work. It fixed the box I was trying to bring back from near death after trying all the other suggestions. THANK YOU!
    Len
  • botheredbothered Manchester UK
    edited Oct 2006
    Thrax said:
    Sticky! Sticky!
    Seconded. This is exactly the sort of stuff that you cannot find easily and can be a life saver.
  • trolltroll Windsor, Nova Scotia Icrontian
    edited Oct 2006
    Len said:
    Hi troll: MANY thanks for the "pe386 fix". It brought to an end many hours of fruitless work. It fixed the box I was trying to bring back from near death after trying all the other suggestions. THANK YOU!
    Len
    Your welcome Len, glad the info helped...

    I spent 2 days on these boxes much to the nattering of my boss wondering who was going to pay for the time to fix them instead of a quick reload...

    Other sites had mentioned that viruses / malware were going to go this way with rootkits and all... Lets hope not as I hate reloading a box when I can bring it back from the dead...


    Again, glad to hear the info has helped. :)

    troll
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Nov 2006
    Thrax said:
    Sticky! Sticky!
    bothered said:
    Seconded. This is exactly the sort of stuff that you cannot find easily and can be a life saver.
    Added to this thread. :)
  • edited Jan 2007
    Thank you very much for posting this information, troll. If it wasn't for you and this post, I probably would've never figured it out. Thank you!
  • trolltroll Windsor, Nova Scotia Icrontian
    edited Jan 2007
    Your welcome Sting2324, glad the info helped!
    troll
  • edited Feb 2007
    hi. I bought the game ghost recon advanced warfighter yesterday..and when I tried to play it.. the game rebooted/crashed..whatever ..I checked what the bluescreen said,and this is what came up:
    0x0000008e ( 0xc0000005, 0x8439a00a, 0x8d63ab4c, 0x00000000

    could it be that I have this rootkit too?
    I dont have any other problem at all with my computer,and I can easily play rainbow six las vegas on it without it crashing etc..
    I HAVE noticed that the computer is a little bit slower then it was just some weeks earlier..but that could depend on anything..

    could anyone help me,if its the same rootkit,or anything else?
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Feb 2007
    darknessviking;461533 said:
    ...could it be that I have this rootkit too?...
    It would be worth your while to check out Symantec's Cleanup Instructions at the link in Post #1. :)
  • TroganTrogan London, UK
    edited Feb 2007
    Here is another fix for the Rustock.B Rootkit, if needed.

    Download RustBFix from one of the following locations...

    http://www.uploads.ejvindh.net/rustbfix.exe

    http://uploads.ejvindh.andymanchesta.com/Rustbfix.exe

    ...and save it to your desktop.

    Double click on rustbfix.exe to run the tool. If a Rustock.b-infection is found, you will shortly hereafter be asked to reboot the computer. The reboot will probably take quite a while, and perhaps 2 reboots will be needed. But this will happen automatically. After the reboot 2 logfiles will open (%root%\avenger.txt & %root%\rustbfix\pelog.txt).
  • edited Feb 2007
    profdlp;461735 said:
    It would be worth your while to check out Symantec's Cleanup Instructions at the link in Post #1. :)
    I dl'd the anti-rootkit mentioned in the post below yours..and ran it..but it coudlnt find any rootkit..so..I guess it wasn't that.. :/

    this is what it says when the computer crashes..(if I didnt write it earlier,cant remember) 0x0000008e ( 0xc0000005, 0x8439a00a, 0x8d63ab4c, 0x00000000
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Feb 2007
    darknessviking;461877 said:
    ...coudlnt find any rootkit..so..I guess it wasn't that...
    Try a pass or two of Memtest-86.
  • edited Feb 2007
    profdlp;462096 said:
    Try a pass or two of Memtest

    I tried..but it said there was nothing wrong..uuuugh..I go crazy soon :confused:
  • edited Feb 2007
    ok my problem is similar to this maybe you all can help me decipher it


    my BSoD code is:

    0x0000008e (0xc0000005, 0xa9f2decc, 0xaa0e7afc, 0x00000000)
    GRTDIMON.SYS address a9f2decc, date stamp 4506F1AE


    please help
  • ThraxThrax Professional Shill, Pokémaster, Watch Slut Austin, TX Icrontian
    edited Feb 2007
    pbhound said:
    ok my problem is similar to this maybe you all can help me decipher it


    my BSoD code is:

    0x0000008e (0xc0000005, 0xa9f2decc, 0xaa0e7afc, 0x00000000)
    GRTDIMON.SYS address a9f2decc, date stamp 4506F1AE


    please help
    Do you have comcast?
  • trolltroll Windsor, Nova Scotia Icrontian
    edited Feb 2007
    I found the Comcast stuff as well...
    You have to uninstall their Security Manager
    http://www.comcast.com/Customers/FAQ/FaqDetails.ashx?Id=2504

    Or if it wont Uninstall Properly
    http://www.comcast.net/help/faq/index.jsp?faq=ServicesSecurity_Manager18106

    Other than that more info is needed as to when this BSoD happens, Normal Mode Only, Safe Mode, on Bootup, after a while, when a specific program launches etc...
  • edited Feb 2007
    troll said:
    I found the Comcast stuff as well...
    You have to uninstall their Security Manager.

    Or if it wont Uninstall Properly
    Other than that more info is needed as to when this BSoD happens, Normal Mode Only, Safe Mode, on Bootup, after a while, when a specific program launches etc...
    i dont have comcast; i have cox. and its after its running for awhile i am not sure exactly as its my daughters machine. i only intsalled 2 programs recently
    1) cox parental software
    2) harry pottery game pack.

    i dont think its the cox software as i also installed it on an identical machine for my other daughter. but i could be as it doesnt really work for media center 2002 edition.

    on a side note if any one knows of good parental software (i.e. something that can limit internet time as well as what sites and can record every thing ) for relativly cheap; please let me know
  • edited Mar 2007
    hey troll....i'm new to this. my computer is giving me this message:

    *** STOP: 0x0000008E (0xc0000005, 0x804EF579, 0xB561886C, 0x00000000)

    What does that mean? What can i do to fix it? Please email me back at [email removed]
    Thanks very much!!!

    Jen

    troll said:
    Greetings & Salutations!

    For the past two days I have worked on two machines at the shop that would just reboot on thier own, after shutting off the Automatic Restart option. That wonderful STOP: 0x0000008E (0xC0000005... BSOD appeared on the screen.

    (Both machines worked fine till the users "Opened a file they received through msn messenger" :banghead: )

    Safe Mode works fine, just reboots in Normal Mode.

    From safe mode cmd prompt only I scanned with F-Prot, Ad-Aware, SpyBot & HijackThis... All things cleaned up or shutoff...
    (Norton was on one of the machines but it was not working and you didn't have enough time to check anything in Normal mode.)

    Rebooted and within a few minutes... STOP: 0x0000008E again... rebooted in safe mode again shut everything off in MSConfig, ran Rootkit Revealer from sysinternals which found nothing... rebooted and same BSOD again...

    Searched Google for 0x0000008E errors and got the standard, "Ram problem, Driver Problem, PS Weak... Tested Ram with memtest, changed the power supply and still no go...

    Another site was talking about posting minidumps for them to look at, so I looked into one of the minidumps and found:

    Rustock rootkit v 1.2
    Z:\NewProjects\spambot\new\driver\objfre\i386\driver.pdb

    A little more Google revealed that this Rootkit, once installed is undetectable by anything, quite the amazing little piece of code...

    Symantec's info on the Rustock Rootkit

    This was it the B version... I followed the directions on Symantec's site to remove it by booting into recovery console from an XP CD. (You cannot detect it in Safe Mode)

    Once there I used "Disable pe386" to shut off the rootkit... I looked while in safe mode for this service and it WAS NOT there... Since it loads with kernel / driver data, it hides everything about itself...

    Symantec's Cleanup Instructions...

    Rebooted in Normal mode and no more BSOD, reinstalled NAV and started it scanning when I left the shop... I will run ADSSpy again and see if it finds the alternate data stream now...

    I realize that this is not the only cause of 0x8e errors but this was my problem, and since there were two machines in the shop with the same problem, I can see more of these coming in for repair...

    Hope this helps those who have just recently developed STOP: 0x0000008E errors.

    troll
  • LincLinc Community Instigator Detroit, MI Icrontian
    edited Mar 2007
    jen_jen_03 said:
    hey troll....i'm new to this. my computer is giving me this message:

    *** STOP: 0x0000008E (0xc0000005, 0x804EF579, 0xB561886C, 0x00000000)

    What does that mean? What can i do to fix it? Please email me back at [email removed]
    Thanks very much!!!

    Jen
    Jen - His original post are the instructions you seek. Were you having trouble with them? Did they not work for you?

    I removed your e-mail address. Posting it on a public forum like this will get it picked up by spammers, and we don't send e-mails - we answer questions on the forum.

    Cheers!
  • edited Mar 2007
    Hello everyone. sorry to bother you with this problem but I don't know how to deal with this and I only know enough about computers to just make it by. every since a few weeks ago or more I have been coming across a problem that I assume was caused when I was very upset and used physical violence to teach my computer a lesson :eek: (Sorry to all of you who disapprove of such things:rolleyes: )

    right now at the moment I have put a new hard-drive into the computer from the store and installed Windows XP Pro on it but I am still getting this erroe message

    Stop: 0X0000008E (0XC0000005, 0X805847DF, 0XF090FB00, 0X00000000)

    I also had Dumper 0 -k showing up in MSconfig but I was able to fix that problem... I think... I right clicked My Computer went to Advanced, Startup and Recovery Settings. Under System Failure I unchecked Automatically Restart and under Write debugging information I changed it to (None)
    so this doesn't seem to pop-up anymore but it might help you... no idea

    seeing as how this problem started after I had hit the side of my tower I have doubts that it is that virus thing but I also tried swapping my RAM in and out to see if that was the problem but nothing.

    any ideas?
  • edited Mar 2007
    My Father recently started having BSOD Errors on his Desktop...
    The error code is:
    **STOP: 0x0000008E (0xC0000005, 0x864897E2, 0xf7223CA0, 0c00000000)
    I have tried rebooting into Safe mode to run Memtest, and to try and look at the mini Dump, but Anytime I try and access My Computer, it Crashes again...
    I can't seem to get it to run ANYTHING to try and analyze the problem...
    Any Ideas on what I can do here?
    Thanks in advance!
    Dave
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Mar 2007
    Run Memtest from a bootable floppy or CD.
  • edited Mar 2007
    Hmm.. ran memtest86+ v1.55 and it kept getting to about 94% done, then restarting at test #4... ran it for over an hour, then had to stop it...

    Now running Memtest-86 v3.2 to see if I can get anything...

    Will post results.
  • edited Mar 2007
    Ran Both Memory Tests... 2 Passes Each... No Errors..

    ??
  • edited Mar 2007
    OKay.. Ran Event Viewer, but can't really see anything...

    It says The Computer has rebooted from a bugcheck' the Bugcheck was:

    0x000008e (0xc0000005, .... ....) It says a dump was saved in c:\windows\minidump\mini031607-12.dmp


    However I can't navigate anywhere to see it.. as soon as I open up My Computer, it crashes.

    Is there anything Specific I should be looking for in the event log?

    It has 4 Service Control Manager Errors and 5 DCOM Errors... But all the DCOMS are "This service cannot be started in safe mode"

    Of the SCM Errors they are:

    The DHCP Client Service Depends on the NetBIOS over Tcpipservice which failed to start because of the following error: A device attached to the system is not funcitoning.

    the DNS Client Service depends on the TCP/IP Protocol Driveer Service which failed to start because of the following error: A device attached to the system is not funtioning.

    The IPSEC Services Service depends on the IPSEC Driver Service which failed to start because of the following error: A device attached to the system is not functioning.

    and

    The Following boot-start or system-start driver(s) failed to load:
    Fips
    IPSec
    MRxSmb
    NetBIOS
    NetBT
    Processor
    RasAcd
    Rdbss
    Tcpip

    This was all booted to safe mode.

    Thanks!
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited Mar 2007
    DJamesL said:
    ...The IPSEC Services Service depends on the IPSEC Driver Service which failed to start because of the following error: A device attached to the system is not functioning.

    and

    The Following boot-start or system-start driver(s) failed to load:
    Fips
    IPSec
    MRxSmb
    NetBIOS
    NetBT
    Processor
    RasAcd
    Rdbss
    Tcpip

    This was all booted to safe mode...
    Those are nearly all network related issues. Have you tried Safe Mode with Networking?

    It might not hurt to post a HijackThis log. Oftentimes when when network-related stuff has gone wacko it's due to some malware butting in where it shouldn't.
  • edited Mar 2007
    Heh, Very helpful little guide i must say,you out-did any Futureshop employee around where i live...they solved a problem for 2days and came right back. Now here's a pickle!
    I seem to have misplaced my recovery Windows XP CD booklet during my move ( living-wise ) nooowww I'm stuck with this and have no way of completeing the recovery... Any suggestions :( ?
  • mtroxmtrox Minnesota
    edited Mar 2007
    troll said:
    I spent 2 days on these boxes much to the nattering of my boss wondering who was going to pay for the time to fix them instead of a quick reload...

    Nice work Troll. Thanks for posting it back here. ^^That was my thought too^^. Since I don't have a boss its me donating time when I get in too deep instead of just reloading.
  • trolltroll Windsor, Nova Scotia Icrontian
    edited Mar 2007
    Thanks mtrox!

    More and more these days it's a quick reload, it just takes to long to get a box rid of things like Smitfraud and such...

    I like to resolve these problems for personal satisfaction mostly... Not cost effective to clean up 90% of the boxes out there today.

    Why must people take an XP box home and create 10 accounts on it for everyone in the house...
    Those machines won't ever get repaired, just ghosted, a fresh install and robocopy the info back to an Old Data directory...

    I like when they insist on a password for their account directories... You take ownership of the dir's just to find out their full of Incomplete pr0n off limewire... :banghead:
  • LeonardoLeonardo Eagle River, Alaska Icrontian
    edited Mar 2007
    they solved a problem for 2days and came right back. Now here's a pickle!
    What security software do you have running. Maybe your system was just re-infected due to poor defenses. We'd be glad to help you if you are unsure if your system has necessary protection.
  • mtroxmtrox Minnesota
    edited Mar 2007
    troll said:


    More and more these days it's a quick reload, it just takes to long to get a box rid of things like Smitfraud and such...

    I do some house calls for some clients and their friends. Its gotten so I tell them I'm going to sit down for one hour, then we're going to talk. Withn an hour I've cleaned up all the easy stuff and have a feel for what kind of nasty little .dll is re-appearing. At that point I let it be their desicion how far I go.

    Ya just can't hand em a bill for $600 to clean up their old Celeron with 256 RAM.
  • delta51888delta51888 Connecticut
    edited Mar 2007
    Hi all,

    Lately I have been having too many encounters with Mr. BSOD, 4-10 within this month of March to be exact, and it always happens when I am playing a PC game and then it clonks out (whatever sound I was hearing at the time repeats and drives a wedge into my brain - lol) & I get this:

    "
    Stop 0x0000008E (0XC0000005, 0XBF8023B4, 0XB4249C90, 0X00000000)

    Win32k.sys - Address BF8023B4 base at BF800000, Datestamp 43446a58

    "

    My system was built in January of this year and here's the specs:
    Asus Crosshair
    AMD Athlon FX-62
    Foxconn Nvidia GeForce 8800 GTX
    2 x 300 GB Western Digital Raptors
    4 GB DDR2 OCZ RAM (OCZ2N1066SR2GK)
    Windows XP Pro

    (One of the reasons I didn't go Vista 64 bit Ultimate to make the most usage out of my memory is not just because of the price, but how many issues people are experiencing with Vista ATM. I am at least going to wait for SP1, maybe SP2 before I convert to it so I can use & perform with the full 4.)

    Now, I started off with 2 gigs of RAM orginally in the PC, then I added 2 more gigs not too long ago, the 21st of this month the 2 gigs arrived at my house and on that same day I locked them in place on my motherboard.

    Please advise on what I should do. Thanks so much.


    PS: Great work, troll, on finding out a possible solution to solving problems with the horrid BSOD. You work is greatly appreciated by all of us. :bigggrin:
  • trolltroll Windsor, Nova Scotia Icrontian
    edited Apr 2007
    delta51888 said:

    PS: Great work, troll, on finding out a possible solution to solving problems with the horrid BSOD. You work is greatly appreciated by all of us. :bigggrin:
    Thank You!

    What it sounds like to me is a RAM problem, get yourself a copy of memtest :

    http://www.memtest.org/download/1.70/memtest86+-1.70.floppy.zip

    Unpack the zip and create the bootable floppy

    Shut everything down and remove all your ram sticks.
    Put them back in one at a time and boot the memtest floppy.

    Let each stick go through at least one pass...
    If RED lines start scrolling at bottom, you have a bad memory...
  • delta51888delta51888 Connecticut
    edited Apr 2007
    Ummm.....I hate to say it, but any alternative if I don't have a floppy drive installed? =(

    EDIT: Oh wait nevermind there's instructions for the CD route. I'll try it out and see how it goes.
  • edited Apr 2007
    I found uninstalling Bit Torrent and all associated files did the trick for me. Not sure it is the cure but it's worth ago if you use that program.

    :cool:
  • pspaul1pspaul1 Gravesend, Kent
    edited Apr 2007
    *** Stop: 0x0000008e (0xc0000005, 0x8056e4ea, 0xf6cc1a08, 0x00000000)



    Hi all, not great with computers, so I've tried following your tips here, but to no real help. I have run MemTest, and ihave an error! but it doesn't make any sense.

    Any help would be great,

    Paul

    The message is...

    Error found with word pair# 12454933 or 12454380 (either could be the source)

    thanks!

    Edit: I ran it for longer and now also have:
    #25904728 or 25904215
    #12454697 or 12454380
    #12454488 or 12454380
    #12454983 or 12454380
    #12454465 or 12454380
    #25904728 or 25904586
    #12454961 or 12454380
  • edited Apr 2007
    Thanks for the post. I encountered the same problem...among many others on one of my co-workers pc. There was no doubt that it was the source of the problem. I would also note that lzx32.sys was in the stop error code during the diagnosis.
  • mtroxmtrox Minnesota
    edited Apr 2007
    pspaul1 said:
    *** Stop: 0x0000008e (0xc0000005, 0x8056e4ea, 0xf6cc1a08, 0x00000000)



    Hi all, not great with computers, so I've tried following your tips here, but to no real help. I have run MemTest, and ihave an error! but it doesn't make any sense.

    Any help would be great,

    Paul

    The message is...

    Error found with word pair# 12454933 or 12454380 (either could be the source)

    thanks!

    Edit: I ran it for longer and now also have:
    #25904728 or 25904215
    #12454697 or 12454380
    #12454488 or 12454380
    #12454983 or 12454380
    #12454465 or 12454380
    #25904728 or 25904586
    #12454961 or 12454380

    Paul,

    What you're seeing is memory locations that do not write, then read accurately. No need to worry about the location addresses you see there. There should be 0 errors, none. With healthy memory, Memtest will run all night making many passes...all with no erorrs.

    You have bad memory. Pitch it fast. This is a good excuse to upgrade and get more so you'll come out in the end.
  • edited May 2007
    Hi my computer is showing theses errors messages I dont understand how to fix it. My brother-in-law says my ram is going Please help Tam38
  • LeonardoLeonardo Eagle River, Alaska Icrontian
    edited May 2007
    Hi, Tam

    Your computer is showing similar errors, or the exact same numbers. We need to know, as different codes specify different problems.
  • edited May 2007
    I know one of them is the same 0x0000008e.......... Ill look next time it goes off for the rest
  • edited May 2007
    I'm getting a BSOD that says
    PAGE_FAULT_IN_NONPAGED_AREA
    STOP: 0x00000050 (0xE3369000,0x00000000,0x805034A1,0x00000001)

    Any idea what may be the cause?

    ps. do you think the Smitfraud virus have anything to do with it? i read that it causes a BSOD to appear
  • LincLinc Community Instigator Detroit, MI Icrontian
    edited May 2007
    tycobb said:
    I'm getting a BSOD that says
    PAGE_FAULT_IN_NONPAGED_AREA
    STOP: 0x00000050 (0xE3369000,0x00000000,0x805034A1,0x00000001)

    Any idea what may be the cause?

    ps. do you think the Smitfraud virus have anything to do with it? i read that it causes a BSOD to appear
    MS says it's from faulty hardware, but what else is new? Heh.

    How long does your computer stay up for? If you suspect a virus, try running HJT and post a log in our Spyware removal forum. You could also try testing out your memory with MemTest. In any case , I recommend starting your own thread so you don't get lost in the shuffle of this one. :)
  • edited Jun 2007
    Hi all im having a problem with my comp rebooting.

    sometimes it happens just randomly when im not even touching the thing and nothing is running but this is a rare occurance.
    the main problem im having is with a game im trying to play. Empire Earth 2 i have played it on this same PC before but i uninstalled it and havent played it for about half a year.

    now i can load the game up fine and im ok in the menues but once i start a game it is only a matter of 20-0 secs before my comp reboots.

    i was told to cnange my settings so i can see an error message and i got it.

    ***STOP:0X0000008E (0XC0000005,5XBFAABE50,0XF1288ALE,0X00000000)

    ***ati3duag.dll-Adress BFAABE56 base at BFA93000, Datestamp 4458dbcc

    now im a completly ingonrant when it comes to comps i mean i dont know anything. but after reading this thread i have hope that you guys might be able to help me.

    i have done the RustBFix thingy and it found nothing.

    i cant get that Memtest thing to work because i dont have a working floppy and not sure how to put it onto disk because it just says enter floppy, no disk option.

    any help would be gratly appricated if you need anymore details il be glad to try and find them for you but like i said im really computor illitirate so i kinder need step by step instructions :o
  • mtroxmtrox Minnesota
    edited Jun 2007
    Helios,

    That ati3duag.dll file is the driver for your ATI video card. I know the game used to run fine, but that was a year ago before lots of other updates came and went elsewhere in your computer. First thing I'd do is see if there is an update for the video card driver.

    Go to Start> Control Panel> System. Then click the Hardware tab, then Device Manager. Click the + by Display Adapters then you'll see your ATI card. Right click it and click "Update Driver...". Let it go through it's steps to update that driver.

    I'm not sure that will solve it, but that is where your problem lies and it's the most likely starting point.
  • edited Jun 2007
    mtrox thanks for the suggestion.

    I followed your steps but it just said, the wizard could not find a better match for your hardware than the software you currently have installed.

    man i wish there was just a simple solution to this computors have to be so stubbon lol.

    well i un-installed my drivers and then re-installed them and the problem still persists.

    my card is a Radeon 7500 seris by the way if that helps it may be to old or something but still like i said it used to work and i seem to have the latest drivers for it.
  • edited Jun 2007
    ok so after searching around it was suggested to me that i may have the Haxdoor virus but i wasnt sure so after looking it up i found a tool that can detect these things called hijackthis

    i ran it but it suggest you show your log file to experts so here i am i hope someone can dicipher this mass of text sorry for its length but i didnt want to miss any of it out as i dont know what is relavent and what isnt.

    Logfile of HijackThis v1.99.1
    Scan saved at 15:50:07, on 09/06/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    c:\program files\mcafee.com\agent\mcdetect.exe
    c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\WgaTray.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    C:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Program Files\McAfee.com\VSO\mcvsshld.exe
    C:\Program Files\McAfee.com\VSO\oasclnt.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    c:\progra~1\mcafee.com\vso\mcvsescn.exe
    C:\Program Files\Common Files\AOL\1135797231\ee\AOLSoftware.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Tesco\Picture Suite\InsDetect.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
    C:\Program Files\SAGEM\SAGEM [EMAIL="F@st"]F@st[/EMAIL] 800-840\dslmon.exe
    C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
    C:\WINDOWS\system32\wuauclt.exe
    c:\progra~1\mcafee.com\vso\mcvsftsn.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Documents and Settings\Katrina Morgan\My Documents\Darrens file\New Folder\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/index.html
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [adiras] adiras.exe
    O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
    O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
    O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
    O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1135797231\ee\AOLSoftware.exe
    O4 - HKLM\..\Run: [EPSON Stylus C44 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P32 "EPSON Stylus C44 Series (Copy 1)" /O6 "USB001" /M "Stylus C44"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [EPSON Stylus C44 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P32 "EPSON Stylus C44 Series (Copy 1)" /M "Stylus C44"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
    O4 - HKCU\..\Run: [Tesco Insert Detect] C:\Program Files\Tesco\Picture Suite\InsDetect.exe
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM [EMAIL="F@st"]F@st[/EMAIL] 800-840\dslmon.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Ulead Photo Express 3.0 SE Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm088YYGB
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/ZwinkyInitialSetup1.0.0.15-3.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{9D9C8EEB-6237-4330-BE21-48B791D809F7}: NameServer = 212.139.132.4 212.139.132.5
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
    O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
    O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe

    any suggestions?
«1345678
Sign In or Register to comment.