"stop 0x0000008e" Error Options

[kimgeni]

Two times during the last couple of weeks, XP has crashed and a blu screen appeared. I dont remember the stop code the first time, but this time the code was "STOP 0x0000008e", with 4 other codes in (0xc0000005, oxaa7f1b98, 0x80539913, 0x00000000).
I found this ( - Link descriptor:MS article "STOP 0x0000008e" error message during Windows XP setup) page, but I didnt install XP, so I guess I cant apply the advices? However, I increased the amount of RAM from 1GB to 2GB some time before the first blus screen, can this be the problem? The amount of non physical memory is set to "1536 - 3072", should I increase this?

This post has been edited by rigel: Mar 1 2008, 06:33 PM

Reason for edit: Mod edit: added description for link

[Albert Frankenst...]

Stop messages that contain 0x0000008E (0x8E for short) can have many causes, but the most common cause is bad RAM.

TROUBLESHOOTING
If your computer has two sticks of RAM in it, then remove one and see if the problems persist. If they do, switch pieces and test again.

ALTERNATIVE
You can run the memory tester from Microsoft. It is free and available for download HERE.

[usasma]

In the event that the memory tests out OK, there's several other things that can cause this error. The 0xc0000005 parameter tells us that it was a memory access violation. So, if it's not bad RAM, then it's a program trying to access the RAM in an unauthorized way.

The most common reason, IME, is malware. Try a few of these free, online antimalware scans:

http://housecall.trendmicro.com
http://www.pandasecurity.com/homeusers/solutions/activescan/
http://www.kaspersky.com/virusscanner
http://www.bitdefender.com/scan8/ie.html
http://support.f-secure.com/enu/home/ols.shtml
http://us.mcafee.com/root/mfs/default.asp
http://onlinescan.avast.com/
http://ca.com/us/securityadvisor/virusinfo/scan.aspx
http://www.eset.com/onlinescan/

Also, I'd suggest that you download this free program and use it to clean your temporary files: http://www.ccleaner.com/download
Please use the default settings to clear the temporary files. The more advanced features are dangerous to use, so please avoid them.

If that still doesn't fix it, then I'd have to suspect that it's a driver issue (unless you've added some new hardware recently). To locate the particular driver I'd suggest that you read this topic: http://www.bleepingcomputer.com/forums/top...tml#entry409491

This post has been edited by usasma: Mar 2 2008, 08:13 AM

Reason for edit: added stuff - 'nother brain cramp! :0)

[kimgeni]

OK. I downloaded Windows Memory Diagnostic and the Windows Server 2003 Resource Kit Tools, but I couldnt find the instructions on how to use the cdburn program in the kit tools to burn the Windows Memory Diagnostic to a CD. Can anyone post the link or the onstructions?

[hamluis]

What burn program do normally use?

Any instructions for burning an iso should be in that program. I use Nero 6.6 and just burned a memtest CD 4 days ago.

The Windows Memory Diagnostic is burned using whatever burn program that you normally use...to burn a bootable CD.

Louis

This post has been edited by hamluis: Mar 2 2008, 03:41 PM

[kimgeni]

I was a bit confused 'cause of this "If you want to create a CD-ROM that you can start your computer from, you must use additional software to create this CD-ROM from the ISO 9660 image, which is named Windiag.iso. To create this CD-ROM from the image, you can use the Cdburn.exe utility..." from the Windows Memory Diagnostic web page.
Anyway, I used Nero 7 to burn an image file, ran the test, 3 passes standard, and 6 passes extended (6 times because I left the computer while it was runing), and it didnt find any errors. I ran the kaspersky web scan, but it only found the 3 files in Norton's virus chest (but not the ones in Avast's, strange?), and since the first time I meet the blu screen I've run adaware, spyboot, superantispyware, AVG antispyware, Norton antivirus full scan, and now Im scaning with avast (thorough scan), so I guess my PC is not infected? At least not from one of the most common kinds of viruses.

"If that still doesn't fix it, then I'd have to suspect that it's a driver issue (unless you've added some new hardware recently)." (Usasma)
I added (in adition to the two new RAM modules) a new video card a week or so before the first blue screen. Can this cause any problems? It requires more power than my power suply can deliver (in terms of watt), but the support at the company I bought it from said that wheter I could use it or not depended on the quality of my power supply, and not just what it can deliver in watt. It has worked fine, and the last time Mr Blue appeared, I was not runing any graphic intensive programs. And therefore, I guess, the power suppply should be able to supply the card because of the card's low workload and temerature, which in turn means that this cant be the problem?? Anyway, Im thinking about upgrading the power supply.

Im just a bit curious, why should I clean my temporary files? (Nice to have a better understanding)

[hamluis]

IMO...temp files are a favorite place for malware to hang out.

Louis

[peterdiva]

Memory testers aren't perfect. Zip up 5 of the most recent minidumps from c:\windows\minidump and attach to next post.

[kimgeni]

Avast found a trojan named Gaobot 2435 in my system volume information folder and moved it to the chest. Could this be the reason for my blue screens? Avast says the trojan was "last changed" 14.1.2008, so I guess I was infected a little while later? Does anyone know what this particular trojan does? Found something about Gabot in general, but not 2435. Should I run more scans, or do you think Avast's thorough scan found it all?

[Billy O'Neal]

Well, that may be it. You should post a HJT log in the Hijack This Logs and Malware Analysis forum.

If you do so, please read this topic for instructions.

http://www.bleepingcomputer.com/forums/topic34773.html

Please be patient. The HJT Team is very busy at the moment.

If you decide to post a HJT log, please refrain from changing your system's configuration until directed by a specialist.

Good luck resolving your problem,
Billy3

[TMacK]

Now that you have a HJT log posted in the HijackThis Logs and Malware Removal forum, you shouldn't make any changes to your system.
Doing so, could change the results of the posted log, making it difficult to properly clean your system.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

This topic will now be closed.
If you have any questions, feel free to send me a PM.