Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bsod Superantispyware


  • Please log in to reply
6 replies to this topic

#1 Jeff Finnan

Jeff Finnan

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 05 July 2008 - 07:02 AM

While installing SUPERAntiSpyware in normal mode I got a BSOD

Stop: 0x1000007e(0xc0000005, 0xb17b6f83, 0xbacf3b98, bacf3894)

Saskutil.sys address b17b6f83 base at b178100, datastamp 48163ef6

Here is the .dmp result:

Loading dump file mini070508-01.dmp
----- 32 bit Kernel Mini Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 0b6c0020
PfnDataBase 805620c8
PsLoadedModuleList 8055d720
PsActiveProcessHead 805638b8
MachineImageType 0000014c
NumberProcessors 00000002
BugCheckCode 1000007e
BugCheckParameter1 c0000005
BugCheckParameter2 b17b6f83
BugCheckParameter3 bacf3b98
BugCheckParameter4 bacf3894
PaeEnabled 00000001
KdDebuggerDataBlock 8054d2e0
MiniDumpFields 000004ff

TRIAGE_DUMP32:
ServicePackBuild 00000300
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 00002268
ThreadOffset 000024c0
CallStackOffset 00002720
SizeOfCallStack 00004000
DriverListOffset 000069b0
DriverCount 00000092
StringPoolOffset 00009508
StringPoolSize 00002d20
BrokenDriverOffset 00000000
TriageOptions ffffffff
TopOfStack bacf3c60
DebuggerDataOffset 00006720
DebuggerDataSize 00000290


Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible

Built by: 2600.xpsp.080413-2111
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sat Jul 05 06:23:04 2008
System Uptime: 0 days 0:17:18
start end module name
804d7000 806e4000 nt Checksum: 001F442E Timestamp: Sun Apr 13 14:
31:06 2008 (4802516A)

Unloaded modules:
b431f000 b434a000 kmixer.sys Timestamp: unavailable (00000000)
b5d0b000 b5d18000 STREAM.SYS Timestamp: unavailable (00000000)
b5dc1000 b5dc4000 SLIP.sys Timestamp: unavailable (00000000)
b5f56000 b5f81000 kmixer.sys Timestamp: unavailable (00000000)
baedb000 baedc000 drmkaud.sys Timestamp: unavailable (00000000)
b72f3000 b7300000 DMusic.sys Timestamp: unavailable (00000000)
baaa8000 baab6000 swmidi.sys Timestamp: unavailable (00000000)
b5f81000 b5fa4000 aec.sys Timestamp: unavailable (00000000)
bae3c000 bae3e000 splitter.sys Timestamp: unavailable (00000000)
b5d99000 b5dad000 parport.sys Timestamp: unavailable (00000000)
ba094000 ba098000 kbdhid.sys Timestamp: unavailable (00000000)
bac80000 bac85000 Cdaudio.SYS Timestamp: unavailable (00000000)
ba098000 ba09b000 Sfloppy.SYS Timestamp: unavailable (00000000)

Finished dump check

C:\WINDOWS\Minidump>

It will only start in Safe Mode. SUPERAntiSpyware will run in Safe Mode. I tried to uninstall it there but it does not show up in Add/Remove nor can I find and uninstall in SUPERAntiSpyware program files. I tried to reinstall but it says Administrative policies do not allow it in Safe Mode. Can I change that and if so how? Is there a better approach to fixing this?

Thanks,
Jeff

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,411 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:37 AM

Posted 05 July 2008 - 11:42 AM

I'd try running chkdsk /r on the system...not sure why you got the BSOD.

Done any other malware scans?

Louis

#3 Jeff Finnan

Jeff Finnan
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 05 July 2008 - 12:15 PM

Here's is how I got to this state: http://www.techspot.com/vb/topic107890.html

While I waited for a response I thought I would post here too. I am doing the vundo check at the moment.


I'd try running chkdsk /r on the system...not sure why you got the BSOD.

Done any other malware scans?

Louis


Edited by Jeff Finnan, 05 July 2008 - 12:18 PM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,411 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:37 AM

Posted 05 July 2008 - 12:25 PM

BleepingComputer.com - Am I infected What do I do - http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/

My suggestion is that you post to the above link, where dedicated assistance is available for malware issues.

The fact that you seem to have something preventing/interfering with installation of malware-defense programs...convinces me that this should be the suggested course of action for you.

If you go that route, please follow all procedures/guidelines for facilitating expeditious, accurate assistance.

Louis

#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:37 AM

Posted 05 July 2008 - 02:54 PM

I suspect that you're still infected also - and that's what's generating the crashes - although your Norton Antivirus could also be causing this.
I'll move this over to the Am I Infected forum for some more expert help from there.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#6 Jeff Finnan

Jeff Finnan
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 05 July 2008 - 09:00 PM

The computer will constantly try to reboot after showing the startup Windows screen with the moving blue bar. It goes for a little bit and then reboots. I tried a repair from the Windows XP CD. Still the same. I probably should not have done that because I think it wants to continue with setup.

If I F8 and go to Safe Mode, I am pretty sure that it wants to do a Chkdsk /R after about an hour it reboots and if I F8 and Safe Mode it Says It cannot install in Safe Mode and the reboots return.

I went into the recovery console.

Did a fixmbr,
ATTRIB -H C:\\boot.ini
ATTRIB -S C:\\boot.ini
ATRIB -R C:\\boot.ini
del boot.ini
BOOTCFG /Rebuild
FIXBOOT

Still get the constant rebooting.
I even tried a boot floppy and still the same result.

I suspect that you're still infected also - and that's what's generating the crashes - although your Norton Antivirus could also be causing this.
I'll move this over to the Am I Infected forum for some more expert help from there.


Edited by Jeff Finnan, 05 July 2008 - 09:02 PM.


#7 Jeff Finnan

Jeff Finnan
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:37 AM

Posted 06 July 2008 - 05:36 AM

I am thinking that I will put in a new drive.

Since I was considering a new drive, I decided to see if an new installation of Windows rather than a repair which kept giving me the rebooting. It turns out the new installation is proceeding.

Edited by Jeff Finnan, 06 July 2008 - 08:19 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users