The last main problem I wan't to fix on my notebook is a random "blue screen" error that has been reocurring more frequently. What basically happens is at any give time the error screen will flash very quickly with system error code, too fast to make anything out, and then my computer reboots on its own. I've had some friends recomend programs to diagnose this, but I wanted to post on her before I do anything.

Thank you!

Can you write down and give us the exact error message when it happens again

Hi qball

If you video camera set it on record that will help you grab the message

All the best
thatman

If you have XP, then try the following to prevent automatic restarting.

Click START->Control Panel->System->Advanced tab->under Startup and recovery, settings->under system failure, uncheck automatically restart. Click OK twice, and close Control Panel.

Hey guys

I wish I could tell you what the message said, it was like a full screen of white text, not just a simple msg box. It flashes so fast I couldn't make out much of it. However I can attempt to record it on video, but it might be hard to capture as it happens randomly. Is there anyway I can find a log of errors a different way so I can post it on here??

I'm assuming maybe what JEservices recomended would freeze the error screen so I can jot it all done, and then would just have to manualy reboot?

Soon as I get back from work I will try these methods

thanks guys

Yes that wil mkae it so we can see the error

OK, finally after 2 days of nothing the error must have happened again. This time however I had turned off the automatic restart after system failure, but the screen was blank when I came home, and the fan was operating at a high volume. The blue screen wasn't there so all I could do was reboot again. Since it happens every few days its really difficult for me to plan and videotape, especially since there is only so much length it can hold, and most times it happens after being on for hours on end. i'm kinda at a loss for diagnosis.

Thanks guys

Have you looked in your event viewer to see if there are any errors there?

OK, i saw my log, and yes there are a handfull of errors. I think I can narrow down to the one that occures when i was gone and shut down. It says the mrtrate has failed due to the start of the follorwing error: then it says it cant specidy what error...

am I on the right track?

It sounds like you are on the right track. Is there a way that you can cut/paste the contents here or provide a screen shot?

I also have a couple more recent errors that are system errors, but these happened while I was on my computer and nothing happened. the error i posted up above was described as a "service control manager" error

Do you have quicken installed?

Error code :100000d1
Parameter 1 :000067a0
P2: 00000002
P3: 00000001
P4:F8193cbf




DATA:

0000: 74737953 45206d65 726f7272 72452020
0010: 20726f72 65646f63 30303120 64303030
0020: 50202031 6d617261 72657465 30302073
0030: 37363030 202c3061 30303030 32303030
0040: 3030202c 30303030 202c3130 39313866
0050: 66626333


this error occured 3 times while I was operating, the "mrTrate has failed.." error occured 3 times today as well, once while i was not around...possibly the reason for the shutdown? the "mrTrate " error has no code or any information listed

no i dont have quicken

Wow. I am floored by my ignorance. I knew that Quicken 2003 software came with my notebook, I always thought that the shortcut was just to install it. I have never used it. However since I just saw that you asked, I opened up the shortcut and was prompted by a stange warning saying that another user is already running this application. Any corelation?

If you do not use Quicken, then I can not see a reason why you couldn't just uninstall it.

Have you heard of any problems associated with uninstalling Quicken, Grinler?

Nope uninstalling should be more than fine. The only reason why I asked is that I have been seeing problems likes yours on various boards that had to do with quicken being installed

Yeah Quicken is a goner for sure if that has anything to do with it. That error saying it was already being used was kind of strange. I removed quicken. Is there anything else I should be doing as of now, or just wait to see if it happens again?

You said that youdo not get the errors unless the computer has been running for a few days. I would wait to see if it comes back up.

Also, I would recommend that you remove it in Safe Mode, and restart the computer.

Hi qball

P1 ContentType application/pkcs10

P2 Default avifile

p3 this will show the application

P4 Default C:WINDOWSsystem32mp4sdmod.dll
Media MPEG-4 S Video Decoder
ThreadingModel Both

HKEY_CLASSES_ROOTDirectShowMediaObjectsCategoriesBF963D80-C559-11DO-8A2B-00A0C9255AC1\n1C22C56D-9879-4F5B-A389-2

This is pointing to DirectX DirectShow

I wood have to say that the first item we need to check for is a Trojan

Can you please run a HijackThis V1.98.02

all the best

thatman

Sure thing, here you go

Logfile of HijackThis v1.98.2
Scan saved at 8:05:43 AM, on 10/1/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
C:\Program Files\mcafee.com\Agent\mcagent.exe
C:\Program Files\mcafee.com\Agent\mcupdate.exe
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Linksys\WUSB11 v25 Config Utility\WUSB11Cfg.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\mozilla.org\Mozilla\mozilla.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.theprp.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.fujitsupc.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.theprp.com/
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.theprp.com/"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\ylqbcgm0.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5Cmozilla.org%5CMozilla%5Csearchplugins%5Cgoogle.src"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\ylqbcgm0.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
O4 - HKLM\..\Run: [MCAgentExe] C:\Program Files\mcafee.com\Agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\Program Files\mcafee.com\Agent\mcupdate.exe /embedding
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Instant Wireless Configuration Utility.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.fujitsupc.com/
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312...meInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab

Log looks clean except i would fix this:

O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)

Its not hurting anything buts its left over from a piece of malware previously on the machine

OK thanks. I cleared that out of my log. I will keep on monitoring.

Hi qball

9C691A33-7DDA-4C2F-BE4C-C176083F35CF

Adware.WinFavorites is an adware program that downloads advertisements onto your computer.

Transmission
This adware program must be manually installed or installed as a component of another program.

technical details
File names: bridge.exe
winfavorites.exe
bridge.dll
bridge.inf
jao.dll

Is your virus program fully updated

All the best

Thatman

No I currently have expired with my Norton Pro, I am going to pick a 05" asap. I will very soon though, soon as my income allows it. Also, those files you mentioned? are they things I should be ridding of? Im slightly confused as to what I should be doing. Thank you for your time thoughi if you have the chance.

Hi qball

I wood like you to do two online virus scan

http://www.pandasoftware.com/activescan/

http://housecall.trendmicro.com/

Pease post back with any info from thw virus scans

All the best

thatman

thatman.

I actually read your post in another thread where you had recomended running those two scans for a similiar "blue screen" problem. The housecall one found one trojan which I deleted, while the panda software one could not finishing scanning with out an error occuring. I'm going to go back and try again.

Hi qball

I believe that we still have a problem with Intuit Quicken
It would appearer it has not been removed fully.

mrtrate - mrtrate.dll - DLL Information

DLL File: mrtrate or mrtrate.dll
DLL Name: Intuit Quicken DLL

Description:
mrtrate.dll is part of a library used by Intuit Quicken.

Common Errors: File Not Found, Missing File, Exception Errors

Do you know how to use the window registry.
Also what trojan was removed by housecall.
Please post back

all the best thatman

I cannot remember the name of the trojan. In hindsight I wish I would of written it down. I am not too familiar with windows registry. Is the DLL file something that should be deleted? I just run housecall one more time, and this time it actually came up with 3 trojans, 2 of them described as TROJ.AGENT.FM, and one as TROJ.BRIDGE.A, all appeared to be temp files as well. I removed them.

Hi qball

I believe the safe way to deal with this is for you to reinstall Quicken
reboot the computer

When you have done that

Click on start

click on control panel

click on add remove programs

now remove Quicken

All the best

thatman

Hey guys, ok this time I should have more thne enough information....
The error occured again, I did go ahead and videotape it should I need to refer to it, however this time when I rebooted I got a windows "system recovered form a serious error" messgae, and I wrote down all the info it provided

Error Signal

BCCode: 10000021
BCP1: 000067A0
BCP2: 00000002
BCP3: 00000001
BCP4: F8193CBF
OSVer: 5_1_2600
SP: 2_0
Product:768_1


then i clicked the link showing the problem files

"Files included in error report"

C:\DOCUME~1\Owner\LOCAL~1\Temp\WER457a.dir00\mini101004-01.dmp

and


C:\DOCUME~1\Owner\LOCAL~1\Temp\WER457a.dir00\sysdata.xml


Then i selected the "send error report to microsoft" and it opened the Microsoft Online Crash Analysis page and on that it stated that the error was caused by a device driver, but did not know why..

alright... I hope that helps narrow this down

Thank you!

Did it say what device driver?

HI qball

The data you have collected is pointimg to a corrupt driver the possiblilty is looking at a piece off software IE a dll file, your registry is looking for related to sysdata.xml

HKEY_USERSS-1-5-21-2801439982-914090876-3233042676-1006SOFTWAREMICROSOFTSEARCH ASSISTANTACMRU.03

000 REG_SZ Scanregw.exe

001 REG_SZ browselc.dll

002 REG_SZ sysdata

003 REG_SZ sysdata.xml

How did you remove Intuit Quicken? I.E with hijackthis, Add or remove programs or the softwares own uninstaller.
I still believe Quicken is part off your problem.

All the best

Thatman

grinler : no it did not specify what driver.

thatman: I removed it via Add/remove, I know you recomended installing and re-uninstalling but I dont believe i have a disk for it.

Hi qball

Please read this Tutorial first
http://www.bleepingcomputer.com/tutorials/tutorial74.html

Now download the free trial of Registry Mechanic™ 3.0 for Windows

The link is at the top of this page Demystifying the Windows Registry
By Bleeping Computer on 29th of Jun 2004

Give it a try it may remove bad links in your registry

All the best

Thatman

OK I did just that, and it came up with quite a few errors, one being an "Add/Remove" error which would make sense if its related to the quicken removal. I have the trial version, all the errors that I have are all repaired under the full version only(go figure). Would it be wise to purchase this, or is there another free program out there I should use? I just want to make sure before I buy anything.

Thanks!!

qball

I also have Norton System Works 2005, I ran the win doctor portion which scans the registry, I did this a few days before that error occured again, is there anything within norton that should be fixing this?

Hi qball

Hang on a min just search for the link on a program i use
This is a 30 trial with no restriction I have the pro version

Back in a mo

thatman

Hi qball

Advanced Uninstaller PRO 2004 $27.00

http://www.innovative-sol.com/uninstaller/index.htm

This easy-to-use Windows application uninstaller makes your computer run more efficiently by removing software and files that were left behind after you uninstalled software that you no longer use. In addition, the program performs a number of cleanup activities, making your computer more secure.

Very few software programs uninstall completely from your computer. Among the things left behind are unnecessary folders, obsolete files, and graphics that will never be used. In addition, there are often items placed in the Windows Registry that are not welcome, as well as spyware and other programs that threaten the security of your computer. Advanced Uninstaller PRO can uninstall all of these files, folders, and programs.

Uninstalling a program is as easy as selecting its name from a list, or dragging and dropping a file or a shortcut on the Advanced Uninstaller PRO desktop icon.

Advanced Uninstaller PRO's built-in Startup Manager gives you control over the programs that are automatically started by Windows, and offers you detailed information about each of them, including advice about what the program does and whether you should disable it. Advanced Uninstaller PRO includes a huge knowledge base containing startup program descriptions, giving you the ability to distinguish between essential Windows components that you want to keep, and dangerous spyware programs that you want to remove.

thatmamn

OK, I purchsed that and ran everything. I'm going to keep checking my system log to see if that error is occuring. I've noticed that the error has been occuring with out shut down on a few occasiong, I'm thinking that its mostly when I am starting my machine judging by the times. Hopefully all is well, I'll keep looking out!

Thanks again!

qball

I dont know if i have to start a new thread but i have the same problem. my screen would turn blue and say something about a KERNEL. When it reboots its says BOOT DISK ERROR. INSERT BOOT DISK. THEN PRESS ENTER. Dont know if this is the exact words but its close. After a few reboots it Boots Windows XP.

Hi meanswing

It is always to the users advantage to post in there own thread; qballs problem was not a startup problem
As for your problem? Quote
I don't know if i have to start a new thread but i have the same problem. My screen would turn blue and say something about a KERNEL. When it reboots its says BOOT DISK ERROR. INSERT BOOT DISK. THEN PRESS ENTER. Don't know if this is the exact word but its close. After a few reboots it Boots Windows XP.

Ok lets start
Is your windows fully updated

Do you have a fully updated virus program

I need more information from you when did the problem start, have you installed any new hardware or software before or after the problem.

Please post into a new thread

All the best

thatman

i dont have sp2 for windows xp . i use a free antivirus AVG. i just installed a new video card. Geforce 5900.

Hi meanswing

I would like you to do two online virus scans

http://www.pandasoftware.com/activescan/

http://housecall.trendmicro.com/

Please post back with any info from the virus scans

All the best

thatman

Ok this topic is very old, but I was searching google for an answer to my own problem and this is exactly the same error message it gave me. My computer randomly restarts as well, I don't have Quicken that I know of... I can edit the registry, I can do alot of things. I'm not computer illiterate at any rate. I need help... This has been happening for about a year. This is on my desktop computer at home, I have xp home.

OK, try posting a new thread (it'll get more attention than this old thing!)

Also, include all the information from the Blue Screen. Or, if you can't find that info - post what you've got and we can proceed from there.