Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

XP 2005 MCE BSOD problem


  • This topic is locked This topic is locked
56 replies to this topic

#1 jonesman99

jonesman99

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 25 June 2011 - 04:14 PM

Hello, i just joined this forum. Its done so many wonders when it came to my computer but now im in a really tight spot, and I hope you guys can pull through for me.

As it says in the title, my Toshiba Satellite A-105 laptop has bsod'd on me even after I had gotten it fixed the same situation, but different stop information. My AVG ran out when I was away at college so I could not reinstall it. So it got bombarded by virus after virus on my school network, even though I tried my hardest to keep it clean and safe.

Here is the stop information:

Stop: 0x0000007E (0xC0000005, 0x86D8B984, 0xF794D8B4, 0xF794D5B0)

That is all the stop information says, of course with the paragraphs above it. I know that it is different from the first one I got on this laptop.

I saw the blue screen view program, I'm going to check it through there, but I still need help. Please respond ASAP

Thank you in advance!

Edited by hamluis, 25 June 2011 - 05:40 PM.
Moved from XP to Am I Infected.


BC AdBot (Login to Remove)

 


#2 bloopie

bloopie

    Bleepin' Sith Turner


  • Malware Response Team
  • 7,927 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:04:55 AM

Posted 25 June 2011 - 04:49 PM

Hello jonesman99, and welcome to the forums! :thumbsup:

Lets get a better look at your bluescreen problem so the members here have a better chance of fixing your machine faster.

Please download BlueScreenView

No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all contents, and paste it into your next reply.

When did you begin getting the BSOD's?
Can you use the laptop at all otherwise normally?
Are there any programs you recently installed?

Please also note what you have done to the machine, if anything, in your next reply along with the BSView log.


bloopie

#3 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 25 June 2011 - 04:58 PM

I found that I cant use BSV because I'm not on the affected computer, and I dont know how to get the information off of it.

It started happening around November of last year. I can't use the computer as 1) it keeps looping the boot up when it gets to the loading screen. I can remember that I did not install anything new on the computer. I cant put the computer in safe mode or use last known good configuration.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:55 AM

Posted 25 June 2011 - 05:41 PM

The first priority...will be to check for existent malware in the Am I Infected forum. Little point in assessing BSODs if the system is infected.

I'm moving this topic to AII.

Louis

#5 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 25 June 2011 - 06:16 PM

How can I clean the system file or check for malware if I am unable to get past that blue screen, or boot in to safe or normal mode? It has to be a virus, but I do remember my computer being cleaned before that happened.

#6 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 26 June 2011 - 01:38 AM

I don't mean to double post, but the stop information has changed. It is now:

Stop: 0x0000007E
(0xC0000005,
0x86D7A984,
0xF790B8B4, 
0xF790B5B0)

I also tried to use the recovery console, but I get this message:

NTLDR is compressed
Press Ctrl+Alt+Del to restart

Please help. I've tried everything that I could think of.

#7 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:55 AM

Posted 03 July 2011 - 04:58 AM

So are you unable to boot in any mode, also what OS do you have?

#8 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 03 July 2011 - 11:01 AM

I have windows XP home media center edition 2005. I am able to boot into the cd-DVD drive, but that's it.

#9 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,933 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:55 AM

Posted 08 July 2011 - 02:04 AM

Hello, please let me know if you need still help with this problem.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#10 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 10 July 2011 - 02:15 AM

Hi. Yes I still need help with this problem.

#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,933 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:55 AM

Posted 10 July 2011 - 02:45 AM

Hello again,

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download driver.sh to your USB drive
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Remove the USB drive and insert it back in your working computer and navigate to report.txt

    Please note - all text entries are case sensitive
Copy and paste the report.txt for my review

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 10 July 2011 - 06:23 PM

This is what I got from the report. Is it supposed to look like this?

Report. txt:


Thu Jun 9 10:14:58 UTC 2011
Driver report for /mnt/sda1/Qoobox/Quarantine/C/WINDOWS/system32/Drivers
Driver report for /mnt/sda1/Qoobox/Quarantine/C/WINDOWS/system32/Drivers


Driver report for /mnt/sda1/Qoobox/Quarantine/C/WINDOWS/system32/Drivers
Driver report for /mnt/sda1/Qoobox/Quarantine/C/WINDOWS/system32/Drivers

#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,933 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:55 AM

Posted 11 July 2011 - 01:58 AM

No, that is not supposed to be this short. :)
Are you sure the scan finished running? Please try it again. If the next log is the same, please use xPUD and manually navigate to /mnt/sda1/windows/system32/drivers and let me know if that folder exists and contains files/folders.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 11 July 2011 - 03:29 AM

Yes there are files and folders in that folder.

I ran it again, and driver.sh did show something different afterwards.
Typed as seen:

13d9257d0cb6644ab4a375b312103f62 i8042prt.sys has NO Company Name!

684fe173d5e9c404716d9bf4ed2aa3fc intelppm.sys has NO Company Name!

#15 jonesman99

jonesman99
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 11 July 2011 - 05:00 AM

The stop information has changed.

STOP: 0x00000024 (0x00190203, 0x86EA62B8, 0xC0000102, 0x00000000)

Any clue as to what it may mean?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users