Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

system crash. debug details attached.


  • Please log in to reply
10 replies to this topic

#1 Arcane

Arcane

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:14 AM

Posted 09 March 2009 - 10:52 AM

here's another bsod i got today. i understand some parts. but i don't get what's really wrong and what i should do.

need help here. it always appears at startup for now. somehow i managed to continue after restarting from safe mode.

argghh. my system is very unstable.. it is very rare that i can start up normally without these bsods.

i'm so tired of crashes. haha. thanks in advance!

in the past, i got much bsods from driver or device errors. is this error related to those?

------------------
System Information
------------------
Operating System: Windows XP Professional (5.1, Build 2600) Service Pack 3 (2600.xpsp_sp3_gdr.080814-1236)
System Manufacturer: ECS
System Model: P4VMM2
BIOS: Default System BIOS
Processor: Intel® Pentium® 4 CPU 1.80GHz
Memory: 480MB RAM
Page File: 541MB used, 630MB available
DirectX Version: DirectX 9.0c (4.09.0000.0904)

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {2, 45e67, 1dfef, 902}

Probably caused by : memory_corruption ( nt!MiUnlinkPageFromList+3f )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 00000002, A list entry was corrupt
Arg2: 00045e67, entry in list being removed
Arg3: 0001dfef, highest physical page number
Arg4: 00000902, reference count of entry being removed

Debugging Details:
------------------


BUGCHECK_STR: 0x4E_2

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: LOGONUI.EXE

LAST_CONTROL_TRANSFER: from 8052959d to 8053767a

STACK_TEXT:
f23edc3c 8052959d 0000004e 00000002 00045e67 nt!KeBugCheckEx+0x1b
f23edc64 804ec11a c00002fc 00000000 00000000 nt!MiUnlinkPageFromList+0x3f
f23edc80 804f24f1 000bfc10 c00002fc 85eb6020 nt!MiResolveTransitionFault+0x26f
f23edcf8 804e8b35 00000000 000bfc10 c00002fc nt!MiDispatchFault+0x102
f23edd4c 804e0944 00000000 000bfc10 00000001 nt!MmAccessFault+0xcde
f23edd4c 77500152 00000000 000bfc10 00000001 nt!KiTrap0E+0xd0
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007fe1c 00000000 00000000 00000000 00000000 0x77500152


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiUnlinkPageFromList+3f
8052959d 008bc62b0568 add byte ptr [ebx+68052BC6h],cl

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiUnlinkPageFromList+3f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 48a4044a

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0x4E_2_nt!MiUnlinkPageFromList+3f

BUCKET_ID: 0x4E_2_nt!MiUnlinkPageFromList+3f

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:14 AM

Posted 09 March 2009 - 05:24 PM

Try testing your RAM.

http://www.memtest86.com/
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 Arcane

Arcane
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:14 AM

Posted 12 March 2009 - 09:16 AM

Try testing your RAM.

http://www.memtest86.com/


i can't format a diskette on my pc. T_T do i need one? i think it is needed for my pc to boot from and run the test.

#4 Arcane

Arcane
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:14 AM

Posted 12 March 2009 - 09:24 AM

here is another bugcheck related to win32.sys. (today i got one with MountMgr.sys - which i will not include unless needed.)
i'll add more details: i recently installed daemon tools to mount an iso. is it the problem?

<up to now i can't start windows without crashes. heeelp. :thumbsup: >

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf80a50c, f229bb1c, 0}

Probably caused by : win32k.sys ( win32k!EXLATEOBJ::bInitXlateObj+5f )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf80a50c, The address that the exception occurred at
Arg3: f229bb1c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!EXLATEOBJ::bInitXlateObj+5f
bf80a50c 8b4750 mov eax,dword ptr [edi+50h]

TRAP_FRAME: f229bb1c -- (.trap 0xfffffffff229bb1c)
ErrCode = 00000000
eax=00000000 ebx=f229bc4c ecx=00000800 edx=e1c33638 esi=e1c26168 edi=45c26168
eip=bf80a50c esp=f229bb90 ebp=f229bb9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!EXLATEOBJ::bInitXlateObj+0x5f:
bf80a50c 8b4750 mov eax,dword ptr [edi+50h] ds:0023:45c261b8=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: Explorer.EXE

LAST_CONTROL_TRANSFER: from bf80a28f to bf80a50c

STACK_TEXT:
f229bb9c bf80a28f 00000000 00000000 45c26168 win32k!EXLATEOBJ::bInitXlateObj+0x5f
f229bc40 bf842842 e2ad8e80 00000000 45c26168 win32k!NtGdiBitBlt+0x451
f229bcd4 bf842a80 e2af67a0 00f6eee4 f229bd10 win32k!_InternalGetIconInfo+0x136
f229bd44 804dd99f 001601eb 00f6eee4 00f6eedc win32k!NtUserGetIconInfo+0xe6
f229bd44 7c90e4f4 001601eb 00f6eee4 00f6eedc nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f6f31c 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!EXLATEOBJ::bInitXlateObj+5f
bf80a50c 8b4750 mov eax,dword ptr [edi+50h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!EXLATEOBJ::bInitXlateObj+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 48ce513a

FAILURE_BUCKET_ID: 0x8E_win32k!EXLATEOBJ::bInitXlateObj+5f

BUCKET_ID: 0x8E_win32k!EXLATEOBJ::bInitXlateObj+5f

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf80a50c, The address that the exception occurred at
Arg3: f229bb1c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!EXLATEOBJ::bInitXlateObj+5f
bf80a50c 8b4750 mov eax,dword ptr [edi+50h]

TRAP_FRAME: f229bb1c -- (.trap 0xfffffffff229bb1c)
ErrCode = 00000000
eax=00000000 ebx=f229bc4c ecx=00000800 edx=e1c33638 esi=e1c26168 edi=45c26168
eip=bf80a50c esp=f229bb90 ebp=f229bb9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!EXLATEOBJ::bInitXlateObj+0x5f:
bf80a50c 8b4750 mov eax,dword ptr [edi+50h] ds:0023:45c261b8=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: Explorer.EXE

LAST_CONTROL_TRANSFER: from bf80a28f to bf80a50c

STACK_TEXT:
f229bb9c bf80a28f 00000000 00000000 45c26168 win32k!EXLATEOBJ::bInitXlateObj+0x5f
f229bc40 bf842842 e2ad8e80 00000000 45c26168 win32k!NtGdiBitBlt+0x451
f229bcd4 bf842a80 e2af67a0 00f6eee4 f229bd10 win32k!_InternalGetIconInfo+0x136
f229bd44 804dd99f 001601eb 00f6eee4 00f6eedc win32k!NtUserGetIconInfo+0xe6
f229bd44 7c90e4f4 001601eb 00f6eee4 00f6eedc nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f6f31c 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!EXLATEOBJ::bInitXlateObj+5f
bf80a50c 8b4750 mov eax,dword ptr [edi+50h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!EXLATEOBJ::bInitXlateObj+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 48ce513a

FAILURE_BUCKET_ID: 0x8E_win32k!EXLATEOBJ::bInitXlateObj+5f

BUCKET_ID: 0x8E_win32k!EXLATEOBJ::bInitXlateObj+5f

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf80a50c, The address that the exception occurred at
Arg3: f229bb1c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!EXLATEOBJ::bInitXlateObj+5f
bf80a50c 8b4750 mov eax,dword ptr [edi+50h]

TRAP_FRAME: f229bb1c -- (.trap 0xfffffffff229bb1c)
ErrCode = 00000000
eax=00000000 ebx=f229bc4c ecx=00000800 edx=e1c33638 esi=e1c26168 edi=45c26168
eip=bf80a50c esp=f229bb90 ebp=f229bb9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!EXLATEOBJ::bInitXlateObj+0x5f:
bf80a50c 8b4750 mov eax,dword ptr [edi+50h] ds:0023:45c261b8=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: Explorer.EXE

LAST_CONTROL_TRANSFER: from bf80a28f to bf80a50c

STACK_TEXT:
f229bb9c bf80a28f 00000000 00000000 45c26168 win32k!EXLATEOBJ::bInitXlateObj+0x5f
f229bc40 bf842842 e2ad8e80 00000000 45c26168 win32k!NtGdiBitBlt+0x451
f229bcd4 bf842a80 e2af67a0 00f6eee4 f229bd10 win32k!_InternalGetIconInfo+0x136
f229bd44 804dd99f 001601eb 00f6eee4 00f6eedc win32k!NtUserGetIconInfo+0xe6
f229bd44 7c90e4f4 001601eb 00f6eee4 00f6eedc nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f6f31c 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!EXLATEOBJ::bInitXlateObj+5f
bf80a50c 8b4750 mov eax,dword ptr [edi+50h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!EXLATEOBJ::bInitXlateObj+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 48ce513a

FAILURE_BUCKET_ID: 0x8E_win32k!EXLATEOBJ::bInitXlateObj+5f

BUCKET_ID: 0x8E_win32k!EXLATEOBJ::bInitXlateObj+5f

Followup: MachineOwner
---------

kd> .trap 0xfffffffff229bb1c
ErrCode = 00000000
eax=00000000 ebx=f229bc4c ecx=00000800 edx=e1c33638 esi=e1c26168 edi=45c26168
eip=bf80a50c esp=f229bb90 ebp=f229bb9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!EXLATEOBJ::bInitXlateObj+0x5f:
bf80a50c 8b4750 mov eax,dword ptr [edi+50h] ds:0023:45c261b8=????????

Edited by Arcane, 12 March 2009 - 09:32 AM.


#5 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:14 AM

Posted 12 March 2009 - 03:33 PM

You need a blank CD. Download the .ISO file from their website "ISO image for creating bootable CD (Windows - zip)", burn it to a CD as an ISO and then use that CD to boot your computer.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:01:14 PM

Posted 12 March 2009 - 07:05 PM

I would suspect either a malware infection, or some recent change to your system is causing this (of lesser probability is a corrupted driver).

Try a couple of these free, online scans to ensure that you're not infected: http://www.bleepingcomputer.com/blogs/usas...?showentry=1252

If you're not infected, post back letting us know that. Also let us know of any recent changes to your system.
If infected, please follow the directions at the bottom of the page in the above link.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#7 Arcane

Arcane
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:14 AM

Posted 17 March 2009 - 09:12 AM

uhm. using kaspersky online scanner, there was no virus found. arrrr.

~anyway, here are the recent changes to my system:
>updated my video driver
>installed daemon tools lite
>installed game - the elder scrolls III: morrowind

as for the memtest. i don't have cd burning capabilities. and my floppy disk can't format diskettes. T_T

#8 Arcane

Arcane
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:14 AM

Posted 25 March 2009 - 06:26 AM

:thumbsup: Here's another bsod detail i got recently. it never stops T_T. need help, really. i uninstalled daemon tools, anyway.


*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

FAT_FILE_SYSTEM (23)
If you see FatExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00080110
Arg2: c0000000
Arg3: 00001000
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_RECORD: c0000000 -- (.exr 0xffffffffc0000000)
ExceptionAddress: 00000000
ExceptionCode: 00000000
ExceptionFlags: 00000000
NumberParameters: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x23

PROCESS_NAME: LSASS.EXE

LAST_CONTROL_TRANSFER: from f74b5f03 to 8053767a

STACK_TEXT:
f6e78b34 f74b5f03 00000023 00080110 c0000000 nt!KeBugCheckEx+0x1b
f6e78bb8 f74b5892 00000000 85cf13f0 85f03c58 Fastfat!FatPagingFileIo+0xeb
f6e78c28 804e13d9 85f8d020 85dd7008 85fd57e8 Fastfat!FatFsdRead+0xa9
f6e78c38 f74d9459 f6e78c64 804e13d9 85fd3350 nt!IopfCallDriver+0x31
f6e78c40 804e13d9 85fd3350 85dd7008 c0000000 sr!SrPassThrough+0x31
f6e78c50 804fb1e0 85c50da8 85f213e0 85f213f0 nt!IopfCallDriver+0x31
f6e78c64 804fb207 85fd3350 85f21409 85f213f8 nt!IopPageReadInternal+0xf3
f6e78c84 804faf2e 85f03c58 85f21418 85f213f8 nt!IoPageRead+0x1b
f6e78cf8 804e8b35 08556884 000bf54d c00002fc nt!MiDispatchFault+0x280
f6e78d4c 804e0944 00000001 000bf54d 00000001 nt!MmAccessFault+0xcde
f6e78d4c 7c910f86 00000001 000bf54d 00000001 nt!KiTrap0E+0xd0
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007fe88 00000000 00000000 00000000 00000000 0x7c910f86


STACK_COMMAND: kb

FOLLOWUP_IP:
Fastfat!FatPagingFileIo+eb
f74b5f03 8b45cc mov eax,dword ptr [ebp-34h]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: Fastfat!FatPagingFileIo+eb

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Fastfat

IMAGE_NAME: Fastfat.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 48025b94

FAILURE_BUCKET_ID: 0x23_Fastfat!FatPagingFileIo+eb

BUCKET_ID: 0x23_Fastfat!FatPagingFileIo+eb

Followup: MachineOwner
---------

kd> .exr 0xffffffffc0000000
ExceptionAddress: 00000000
ExceptionCode: 00000000
ExceptionFlags: 00000000
NumberParameters: 0

#9 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:14 AM

Posted 25 March 2009 - 04:14 PM

Right click on the C drive in Explorer and go Properties > Tools > Check Now (under Error Checking). Check both boxes then click "Start Now". A message will pop up saying that Error Checking will run after you restart the computer. Restart the computer and Error Checking will run automatically after the restart. After itís finished it will restart into Windows automatically.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#10 Arcane

Arcane
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:14 AM

Posted 27 March 2009 - 01:18 PM

i tried it. yet. when i start up this day. another bsod happened. glad i'm lucky to go on every reboot. arrrr. i think no errors were found, though.

#11 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:14 AM

Posted 29 March 2009 - 05:30 PM

I still think you need to test the RAM. Can you burn the CD on a friends computer?
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users