It will (try to) record what was going on when your computer crashed and save it to a text file. By studying the file you'll at least get a list of likely suspects as to what caused the crash.
From Microsoft:
The file created should appear in the root of the drive where Windows is installed. As for being "easy to read and understand", it may be, but it might just look like gibberish unless you know what you're looking for. You can attach a copy of the dump file here and we'll have a look.
You could also try right-clicking My Computer, then go to Properties>>Advanced>>Startup and Recovery Settings, then uncheck Automatically Restart.
It will produce a BSOD with an error code. Let us know what it is and we'll try and help.
Hi. My error code is
0x0000008E(0xC0000005,0XEDDABB4A,0XB5E6A7E8,0X00000000). I am not tech savy and am stumped. Any help would be greatly accepted
Ugh, when I boot after 30 seconds it will give me a BSOD STOP 0x0000008E, 0xC.., 0xEE, 0xEB, 0x000000000
Tried the minidump and what not seem to think it is a virus. When running in safe mode all links in my browser seem to be redirected and it will not let me run an installer of the latest nod32.
I have a problem that is really close; it was caused by some sort of virus/trojan & rootkits. Heres what happened:
(i'm running XP SP3)
Yesterday I was browsing online and my start menu & bar changed to the classic windows skin. I could not open my anti-maleware program; so I ran a scan with my anti-spyware program. and found malicious program hiding as 'scvhost.exe' I removed this and restarted; a few seconds after windows started (about 15 seconds) it went to a BSOD with
this STOP error: 0X0000008E 0XC0000005 0XA12AFB75 0X9F0F47E8 0X00000000.
I restarted in safemode and ran I attempted to run my anti-maleware program but was unable to. so I ran my anti-spyware program and discovered 57 rootkits that I then deleted. Most of them were disabling programs. I restarted in safemode and was then able to run my anti-maleware which turned up a few trojans which were then deleted. I then attempted to restart normaly but the BSOD came up again. It was at this point I found this thread attempted what the OP had done but when I went into system recovery and typed the 'disable pe386' it was not found.
I think I have somthing similar to this but possibly a different name? I am not sure what steps to take from this point. or what info you guys would need to help, Many thanks in advance for any help.
Im not sure if this was posted before, but after fiddling around with the same problem, and reading this forum, I found that the fix for this problem was to disable Catalyst Control Center on the PC. Im now going to update it, and hopefully the problem will go away.
The PC has XP SP2, and the card was a Radeon 9250, if that helps anybody.
I mainly posting this a) to help, and b) as a thank you for the fact that this forum helped me find the solution.
Keep up the good stuff guys.
0
LeonardoWake up and smell the glaciersEagle River, AlaskaIcrontian
Good evening I was hoping someone could help me. For the past week or so my computer has been crashing and comes up with the blue screen, and the following codes:
I have tried just about everything I can think of.
I have tried uninstalling SP3, and that wasn't the problem.
Uninstalling and reinstaling the antivirus, that wasn't the problem.
Uninstalling new software and drivers, that wasn't the problem.
I recently installed a new hard drive and 2 memory cards, and the computer was working smoothly for over a month. The last thing I did to the computer was install Java and Flash Plugin about 2 weeks ago, but after installing them nothing was wrong.
I'm sick of this blue screen! I can't get anything done on my computer, and I'm about to start classes soon and I can't even use my computer because it randomly crashes.
I have a Dell XPS M140, 160GB HDD, 2GB RAM, Win XP MCE.
I am at the mercy of your copious amounts of knowledge-I am about to bash in the stupid computer with my hammer!
Very much a novice but tried to be a do it yourselfer on this and haven't had much luck.
Heres my story...
computer was running pretty slow and then the kids indicated that it was showing this "blue screen" and shutting down every once in a while.
Came across the error and assumed that my son had found a virus somehow so I thought the best option would be to back things up and reformat the hard drive.
Got that done but then had trouble getting the sata harddrive recognized by winxp and thought it was a bad hard drive that caused the problem in the first place (clearly I know very little). Bought a new hard drive , some extra ram and tried to get that up and going tonight. Figured out that it wasn't the HD in all likelyhood and I just needed drivers to get it back up and running after I formatted it. After alot of searching and cursing I get the new hard drive started with an xp installation only to get the same stupid blue screen that started this all in the first place. I tried some solutions like swapping out the ram and disabling the "spread spectrum" in the bios-but the screen is still there and I can't get windows on.
Any and all help would be appreciated...
i have an asus a7n8x-e deluxe motherboard, the hd is a new seagate sata 500g and the ram is a new 512 stick. I don't know if there is anything else I need to share. I can't make floppies only cd's on the laptop that I am using now if there is some tool I can access.
Good evening I was hoping someone could help me. For the past week or so my computer has been crashing and comes up with the blue screen, and the following codes:
I have tried just about everything I can think of.
I have tried uninstalling SP3, and that wasn't the problem.
Uninstalling and reinstaling the antivirus, that wasn't the problem.
Uninstalling new software and drivers, that wasn't the problem.
I recently installed a new hard drive and 2 memory cards, and the computer was working smoothly for over a month. The last thing I did to the computer was install Java and Flash Plugin about 2 weeks ago, but after installing them nothing was wrong.
I'm sick of this blue screen! I can't get anything done on my computer, and I'm about to start classes soon and I can't even use my computer because it randomly crashes.
I have a Dell XPS M140, 160GB HDD, 2GB RAM, Win XP MCE.
Thanks. So I uninstalled Adobe Flash Player, Plugins, and Java and so far the blue screen hasn't appeared. I don't know if I had mentioned that Firefox wouldn't start before no matter how many times I clicked on the Icon, only IE7 would open. I also had to uninstall and reinstall Firefox, and now my computer roons fast again. Hopefully the blue screen doesn't appear again. I will let you know if it does. Thanks again.
I thought uninstalling and reinstalling java, flash and its plugins was the solution, as the computer ran smoothly yesterday. I was able to restart after uninstalling/reinstalling and the blue screen didn't appear at all...until today! I put the computer on standby last night, and today when I wake up the computer from standby as soon as it gets to the login screen, the blue screen of death reappears. So I manually shut down the computer and turn it back on. Then I get as far as login back in, open up my browser to this page and it appears again. I am frustrated with my computer. I don't want to have to remove the hard drive again and lose everything I installed, that only comes with 1 license (like my MS Office and Antivirus). I did a PC Cleanup from the System Tools menu and nothing. I don't know what else to do! I'm this close to kicking myself in behind trying to figure this out! Microsoft wasn't helpful at all, and I don't know if it's an issue with Microsoft, some stupid virus (which the antivirus doesn't find, nor spyware), or what the heck!
I ran hijack this, but I can't get into the computer. Hopefully later on I will have enough time to copy the file into my USB and post it here.
Have you tried uninstalling all the "Java and Flash stuff" and seeing
whether you still get the BSOD. I had a problem with Java & Flash
once, and when I took it out, and updated (on Win XP Home) everything,
then re-installed Java & Flash, the problem disappeared. No idea
why. I only think I think, apart from that it's a lot of trial and error!
Sometimes you, seemingly, I guess, have to keep several versions
of Java installed, because one thing needs the new, the other the old,
and the other the very old. So, it makes sense to keep the old install
data around in some fashion, backed up, etc.
If this doesn't make sense to you, then welcome to the club.
Keep trying. Being just plain lucky also helps.
WK :thumbup
0
LeonardoWake up and smell the glaciersEagle River, AlaskaIcrontian
edited January 2009
Standby and hibernate are fully compatible with all hardware configurations, even with some off-the-shelf branded configurations. Rather than standby, just leave it in normal mode or shut it down. That may not be the solution, but it's worth a try. Right click on the desktop, got to screen saver, click on "Power" at the bottom of the small window. Turn off all hibernate and power saving options.
Standby and hibernate are fully compatible with all hardware configurations, even with some off-the-shelf branded configurations. Rather than standby, just leave it in normal mode or shut it down. That may not be the solution, but it's worth a try. Right click on the desktop, got to screen saver, click on "Power" at the bottom of the small window. Turn off all hibernate and power saving options.
Oh I have tried that, just shutting down and not putting in standby or hibernation, and changing the power settings. Didn't work. As soon as I go home from school I plan on running a memory test to see if it's the memory, taking out one memory card at a time to see if it's the memory being faulty, and just go on from there. If it's the memory, hopefully I can exchange it for new one since I bought it over a month ago.
EDIT: should state, "Standby and hibernate are not fully compatible with all hardware configurations, even with some off-the-shelf branded configurations."
After nearly 4 years of owning the computer I had never come across this blue screen.
0
LeonardoWake up and smell the glaciersEagle River, AlaskaIcrontian
edited January 2009
Your troubleshooting is logical. Blue screen is often an indicator of faulty memory.
Your troubleshooting is logical. Blue screen is often an indicator of faulty memory.
Oh gosh I sure hope so. I'd rather it be the memory so that I don't lose anything valuable. The memory was cheap compared to the HDD and software installed.
and if that doesn't do it, then may be there is something
wrong with the Master Boot Record MBR, for which several Harddrive
manufacturers provide utilities. Some of these may need to be run
by booting from a CD into a basic DOS, and you may need a second
smooth running computer to download and burn these utils to CD's.
Also, Microsoft iteself has some free utils for this purpose. The whole
procedure is tricky, and doing it wrong can make your harddrive
inaccessible. So, depending on your experience level, you may want to
opt for a really knowledgeable computer specialist to track this mystery
down...
Good luck!
WK
I thought uninstalling and reinstalling java, flash and its plugins was the solution, as the computer ran smoothly yesterday. I was able to restart after uninstalling/reinstalling and the blue screen didn't appear at all...until today! I put the computer on standby last night, and today when I wake up the computer from standby as soon as it gets to the login screen, the blue screen of death reappears. So I manually shut down the computer and turn it back on. Then I get as far as login back in, open up my browser to this page and it appears again. I am frustrated with my computer. I don't want to have to remove the hard drive again and lose everything I installed, that only comes with 1 license (like my MS Office and Antivirus). I did a PC Cleanup from the System Tools menu and nothing. I don't know what else to do! I'm this close to kicking myself in behind trying to figure this out! Microsoft wasn't helpful at all, and I don't know if it's an issue with Microsoft, some stupid virus (which the antivirus doesn't find, nor spyware), or what the heck!
I ran hijack this, but I can't get into the computer. Hopefully later on I will have enough time to copy the file into my USB and post it here.
I am very much not computer savvy, but have enough knowledge at least to know that (:
Recently have been receiving the following message shortly after startup:
STOP: 0x0000008E (0xc0000005, 0xF1BF621D, 0xEED38784, 0x00000000)
Beginning dump of physical memory
Physical memory dump complete
Contact your system administrator or technical support group...yada yada
This pops up following startup, usually about 30 seconds after.
I thought it may be a RAM issue and put in a new 1 GB chip, but am still having the issue. Computer works in Safe Mode
Unfortunately in my 2 moves since getting the comp - do not have my Windows XP CD anymore. Would hate to have to reformat.
I'd also get a copy of Malwarebytes' Anti-Malware from http://malwarebytes.org/mbam.php it will install and run in safe mode. Update it after you get back online...
I'd also get a copy of SuperAntiSpyware from http://superantispyware.com but it will NOT install in safe mode. Use it after you clean up with Anti-MalwareUpdate and your back in normal mode.
This is a great start to solving your problem, try these first and let us know.
I haven't tested the memory yet, or removed the RAM (because I'm afraid I'll break something). But, I'll run memtest today. Can you tell me, does anything about this code stand out? The BSOD doesn't identify any drivers, and it does load in Safe Mode w/ Networking. The PC is only 1 year old, and isn't used heavily at all. And, of course, the warranty was up on 12/30.
Cryssteen, can you do me a favor and run this program and this program in safe mode? After that, report back what happens with both.
Ok.. VundoFix came up clean. Here's the report from Smitfraud:
SmitFraudFix v2.391
Scan done at 17:52:59.21, Tue 01/20/2009
Run from C:\Documents and Settings\Christine\Desktop\anti-virus\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» Process
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, following keys are not inevitably infected!!!
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Dell Wireless 1395 WLAN Mini-Card - Packet Scheduler Miniport
DNS Server Search Order: 68.87.71.226
DNS Server Search Order: 68.87.73.242
DNS Server Search Order: 68.87.64.146
Scan done at 17:58:19.79, Tue 01/20/2009
Run from C:\Documents and Settings\Christine\Desktop\anti-virus\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Dell Wireless 1395 WLAN Mini-Card - Packet Scheduler Miniport
DNS Server Search Order: 68.87.71.226
DNS Server Search Order: 68.87.73.242
DNS Server Search Order: 68.87.64.146
Thrax whenever I ran a malware program or the vundo fix it stoped right after 30 minutes of scanning. Mlware found 19 infected objects and vundofix found 8 items before the following appeared. The instruction at "0x00c0101c" referenced about "0x009800000". The memory could not be "read". Click pn OK to terminate the program. Click on CANCEL to debug the program
Thrax whenever I ran a malware program or the vundo fix it stoped right after 30 minutes of scanning. Mlware found 19 infected objects and vundofix found 8 items before the following appeared. The instruction at "0x00c0101c" referenced about "0x009800000". The memory could not be "read". Click pn OK to terminate the program. Click on CANCEL to debug the program
I will run siri uz when I get back.
Alright, you definitely have a spyware infection. Go here and follow those instructions; they'll get you fixed up in a jiffy.
As for your issue, I'm not quite sure yet. Have you done a memory or a hard drive integrity test? Do you know how? I can link you some tutorials if you need them.
As for your issue, I'm not quite sure yet. Have you done a memory or a hard drive integrity test? Do you know how? I can link you some tutorials if you need them.
If the hard drive testing guide doesn't work right, you can use SeaTools for DOS from this page.
These files will be stored on your hard drive as a CD image called a .ISO file. It's the complete contents of a CD in a single file. In order to burn them to a CD so you can actually use these programs like the guides describe, you must burn the CD image in a certain way. This guide will walk you through that.
A while back I made a post saying I was getting the same 0x08e message that a lot of people have been getting. Well, since that post, first I bought a new Hard Drive, still got the message, then I bought a couple new ram sticks and I was still crashing, so I pulled the video card out and used the onboard video.. still crashing. After all of that I figured the problem would have to the Motherboard or Processor. Since I really didn't want to buy one or the other and still have the problem I went ahead and bought both a new processor and motherboard. I Reinstalled everything from scratch and it appeared to work fine for a whole day then started getting the exact same crashes all over again. I read up on Power Supplys cause I had one computer that had began crashing with blue screens right before the Power supply fried out... and figured that if I bought a new power supply, That had to fix the problem.. I had replaced EVERYTHING already. Well, the good news is that I pretty much have a new computer there now, but I am still getting the crashes. The only way I could get it to run is by having only one of the ram sticks in it. Memtest has not detected any problems in ANY of the ram sticks, but 3 out of 4 of the ram sticks that I have seem to crash if I have them in the board, even if they are the only in it. In my old board I noticed a couple times the ram had heated up pretty quick.
Is it possible that the old motherboard was indeed causing the problems the whole time and that it might of damaged all those ram sticks? That's what it seems like to me but I just want to make sure before I spend more money on ram or something and still have problems.
Comments
Hi. My error code is
0x0000008E(0xC0000005,0XEDDABB4A,0XB5E6A7E8,0X00000000). I am not tech savy and am stumped. Any help would be greatly accepted
Tried the minidump and what not seem to think it is a virus. When running in safe mode all links in my browser seem to be redirected and it will not let me run an installer of the latest nod32.
Anyone seen this? thoughts
Thanks
(i'm running XP SP3)
Yesterday I was browsing online and my start menu & bar changed to the classic windows skin. I could not open my anti-maleware program; so I ran a scan with my anti-spyware program. and found malicious program hiding as 'scvhost.exe' I removed this and restarted; a few seconds after windows started (about 15 seconds) it went to a BSOD with
this STOP error: 0X0000008E 0XC0000005 0XA12AFB75 0X9F0F47E8 0X00000000.
I restarted in safemode and ran I attempted to run my anti-maleware program but was unable to. so I ran my anti-spyware program and discovered 57 rootkits that I then deleted. Most of them were disabling programs. I restarted in safemode and was then able to run my anti-maleware which turned up a few trojans which were then deleted. I then attempted to restart normaly but the BSOD came up again. It was at this point I found this thread attempted what the OP had done but when I went into system recovery and typed the 'disable pe386' it was not found.
I think I have somthing similar to this but possibly a different name? I am not sure what steps to take from this point. or what info you guys would need to help, Many thanks in advance for any help.
Im not sure if this was posted before, but after fiddling around with the same problem, and reading this forum, I found that the fix for this problem was to disable Catalyst Control Center on the PC. Im now going to update it, and hopefully the problem will go away.
The PC has XP SP2, and the card was a Radeon 9250, if that helps anybody.
I mainly posting this a) to help, and b) as a thank you for the fact that this forum helped me find the solution.
Keep up the good stuff guys.
STOP: 0x0000008E (0xC000005, 0x805446DE, 0xA98A37FC, 0x00000000)
I have tried just about everything I can think of.
I have tried uninstalling SP3, and that wasn't the problem.
Uninstalling and reinstaling the antivirus, that wasn't the problem.
Uninstalling new software and drivers, that wasn't the problem.
I recently installed a new hard drive and 2 memory cards, and the computer was working smoothly for over a month. The last thing I did to the computer was install Java and Flash Plugin about 2 weeks ago, but after installing them nothing was wrong.
I'm sick of this blue screen! I can't get anything done on my computer, and I'm about to start classes soon and I can't even use my computer because it randomly crashes.
I have a Dell XPS M140, 160GB HDD, 2GB RAM, Win XP MCE.
Thanks I would really appreicate someone's help.
God Bless.
Cici
Very much a novice but tried to be a do it yourselfer on this and haven't had much luck.
Heres my story...
computer was running pretty slow and then the kids indicated that it was showing this "blue screen" and shutting down every once in a while.
Came across the error and assumed that my son had found a virus somehow so I thought the best option would be to back things up and reformat the hard drive.
Got that done but then had trouble getting the sata harddrive recognized by winxp and thought it was a bad hard drive that caused the problem in the first place (clearly I know very little). Bought a new hard drive , some extra ram and tried to get that up and going tonight. Figured out that it wasn't the HD in all likelyhood and I just needed drivers to get it back up and running after I formatted it. After alot of searching and cursing I get the new hard drive started with an xp installation only to get the same stupid blue screen that started this all in the first place. I tried some solutions like swapping out the ram and disabling the "spread spectrum" in the bios-but the screen is still there and I can't get windows on.
Any and all help would be appreciated...
i have an asus a7n8x-e deluxe motherboard, the hd is a new seagate sata 500g and the ram is a new 512 stick. I don't know if there is anything else I need to share. I can't make floppies only cd's on the laptop that I am using now if there is some tool I can access.
whether you still get the BSOD. I had a problem with Java & Flash
once, and when I took it out, and updated (on Win XP Home) everything,
then re-installed Java & Flash, the problem disappeared. No idea
why. I only think I think, apart from that it's a lot of trial and error!
Sometimes you, seemingly, I guess, have to keep several versions
of Java installed, because one thing needs the new, the other the old,
and the other the very old. So, it makes sense to keep the old install
data around in some fashion, backed up, etc.
If this doesn't make sense to you, then welcome to the club.
Keep trying. Being just plain lucky also helps.
WK :thumbup
I thought uninstalling and reinstalling java, flash and its plugins was the solution, as the computer ran smoothly yesterday. I was able to restart after uninstalling/reinstalling and the blue screen didn't appear at all...until today! I put the computer on standby last night, and today when I wake up the computer from standby as soon as it gets to the login screen, the blue screen of death reappears. So I manually shut down the computer and turn it back on. Then I get as far as login back in, open up my browser to this page and it appears again. I am frustrated with my computer. I don't want to have to remove the hard drive again and lose everything I installed, that only comes with 1 license (like my MS Office and Antivirus). I did a PC Cleanup from the System Tools menu and nothing. I don't know what else to do! I'm this close to kicking myself in behind trying to figure this out! Microsoft wasn't helpful at all, and I don't know if it's an issue with Microsoft, some stupid virus (which the antivirus doesn't find, nor spyware), or what the heck!
I ran hijack this, but I can't get into the computer. Hopefully later on I will have enough time to copy the file into my USB and post it here.
Hope someone can help.
Thanks. God Bless.
Cici
Oh I have tried that, just shutting down and not putting in standby or hibernation, and changing the power settings. Didn't work. As soon as I go home from school I plan on running a memory test to see if it's the memory, taking out one memory card at a time to see if it's the memory being faulty, and just go on from there. If it's the memory, hopefully I can exchange it for new one since I bought it over a month ago.
EDIT: should state, "Standby and hibernate are not fully compatible with all hardware configurations, even with some off-the-shelf branded configurations."
After nearly 4 years of owning the computer I had never come across this blue screen.
Oh gosh I sure hope so. I'd rather it be the memory so that I don't lose anything valuable. The memory was cheap compared to the HDD and software installed.
wrong with the Master Boot Record MBR, for which several Harddrive
manufacturers provide utilities. Some of these may need to be run
by booting from a CD into a basic DOS, and you may need a second
smooth running computer to download and burn these utils to CD's.
Also, Microsoft iteself has some free utils for this purpose. The whole
procedure is tricky, and doing it wrong can make your harddrive
inaccessible. So, depending on your experience level, you may want to
opt for a really knowledgeable computer specialist to track this mystery
down...
Good luck!
WK
The code I got was: 0x0000008e (0xc0000005, 0x8b82a133, 0xa1061640, 0x000000
Any help would be much appreciated.
I am very much not computer savvy, but have enough knowledge at least to know that (:
Recently have been receiving the following message shortly after startup:
STOP: 0x0000008E (0xc0000005, 0xF1BF621D, 0xEED38784, 0x00000000)
Beginning dump of physical memory
Physical memory dump complete
Contact your system administrator or technical support group...yada yada
This pops up following startup, usually about 30 seconds after.
I thought it may be a RAM issue and put in a new 1 GB chip, but am still having the issue. Computer works in Safe Mode
Unfortunately in my 2 moves since getting the comp - do not have my Windows XP CD anymore. Would hate to have to reformat.
Any help/suggestions would be great. Thanks!
Scott
Hey ScottV1A!
You should still obtain a copy of the memtest bootable CD image.
If you dont know how to do this, primesuspect wrote an excellent guide here.
http://icrontic.com/articles/diagnose_with_memtest86
I'd also get a copy of Malwarebytes' Anti-Malware from http://malwarebytes.org/mbam.php it will install and run in safe mode. Update it after you get back online...
I'd also get a copy of SuperAntiSpyware from http://superantispyware.com but it will NOT install in safe mode. Use it after you clean up with Anti-MalwareUpdate and your back in normal mode.
This is a great start to solving your problem, try these first and let us know.
Good Luck!
Much tahnks for your help. Everything is up and running now, so let's just hope it stays that way!
Thanks again!
ScottV
Good to hear your fixed up.
stop: 0x0000008e (0xc0000005, 0xee94221d, 0xeb5387e8, 0x00000000)
Thanks
C
Ok.. VundoFix came up clean. Here's the report from Smitfraud:
SmitFraudFix v2.391
Scan done at 17:52:59.21, Tue 01/20/2009
Run from C:\Documents and Settings\Christine\Desktop\anti-virus\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» Process
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Christine\Desktop\anti-virus\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe
»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\FAVORI~1
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, following keys are not inevitably infected!!!
o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, following keys are not inevitably infected!!!
Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrsstx.dll"
"LoadAppInit_DLLs"=dword:00000001
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Dell Wireless 1395 WLAN Mini-Card - Packet Scheduler Miniport
DNS Server Search Order: 68.87.71.226
DNS Server Search Order: 68.87.73.242
DNS Server Search Order: 68.87.64.146
HKLM\SYSTEM\CCS\Services\Tcpip\..\{D9EB2EFF-49FC-49D8-BF8F-3215BF52CEB9}: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS2\Services\Tcpip\..\{D9EB2EFF-49FC-49D8-BF8F-3215BF52CEB9}: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS3\Services\Tcpip\..\{D9EB2EFF-49FC-49D8-BF8F-3215BF52CEB9}: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
What's next? Does this mean anything?
SmitFraudFix v2.391
Scan done at 17:58:19.79, Tue 01/20/2009
Run from C:\Documents and Settings\Christine\Desktop\anti-virus\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» hosts
127.0.0.1 localhost
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix
S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Dell Wireless 1395 WLAN Mini-Card - Packet Scheduler Miniport
DNS Server Search Order: 68.87.71.226
DNS Server Search Order: 68.87.73.242
DNS Server Search Order: 68.87.64.146
HKLM\SYSTEM\CCS\Services\Tcpip\..\{D9EB2EFF-49FC-49D8-BF8F-3215BF52CEB9}: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS2\Services\Tcpip\..\{D9EB2EFF-49FC-49D8-BF8F-3215BF52CEB9}: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS3\Services\Tcpip\..\{D9EB2EFF-49FC-49D8-BF8F-3215BF52CEB9}: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242 68.87.64.146
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
Registry Cleaning done.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
I will run siri uz when I get back.
Alright, you definitely have a spyware infection. Go here and follow those instructions; they'll get you fixed up in a jiffy.
@CRYSSTEEN:
As for your issue, I'm not quite sure yet. Have you done a memory or a hard drive integrity test? Do you know how? I can link you some tutorials if you need them.
Yes, instructions would be great.
thanks
c
Hard drive testing: Here.
Memory testing: Here.
If the hard drive testing guide doesn't work right, you can use SeaTools for DOS from this page.
These files will be stored on your hard drive as a CD image called a .ISO file. It's the complete contents of a CD in a single file. In order to burn them to a CD so you can actually use these programs like the guides describe, you must burn the CD image in a certain way. This guide will walk you through that.
Is it possible that the old motherboard was indeed causing the problems the whole time and that it might of damaged all those ram sticks? That's what it seems like to me but I just want to make sure before I spend more money on ram or something and still have problems.