Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ntkrnlpa.exe causing BSOD


  • This topic is locked This topic is locked
7 replies to this topic

#1 muchofrustration

muchofrustration

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:09:22 AM

Posted 09 January 2012 - 03:29 PM

Hello, I am not sure if this is posted in the correct section but I hope you can help. Every time I restart my computer the Blue Screen of Death appears unless I restart it in safemode. I ran a software that said that it may be caused by a problem with ntkrnlpa.exe and at least one other file. I have no idea what this is and have no idea how to fix it. Please Help!

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,872 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:22 AM

Posted 09 January 2012 - 10:43 PM

System manufacturer and model?

What version of Windows?

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html .

Double-click BlueScreenView.exe file.

When autoscan is done (screen comes up), click Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt, copy all content and paste it into your next post.

Louis

#3 muchofrustration

muchofrustration
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:09:22 AM

Posted 10 January 2012 - 10:20 PM

Thank you!

manufacturer/model: Lenovo/ 3000 N100

Windows Vista

Mini010912-02.dmp 1/9/2012 9:41:29 AM PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 0x80d3d000 0x00000000 0x81c84c00 0x00000000 ntkrnlpa.exe ntkrnlpa.exe+a9ff2 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.0.6000.17021 (vista_gdr.100218-0019) 32-bit ntkrnlpa.exe+a9ff2 ntkrnlpa.exe+8fc44 ntkrnlpa.exe+84c00 ntkrnlpa.exe+297a8e C:\Windows\Minidump\Mini010912-02.dmp 2 15 6000 135,616
Mini010912-01.dmp 1/9/2012 8:59:35 AM SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e 0xc0000005 0x81c6016e 0xb6841b8c 0xb6841888 hal.dll hal.dll+6518 Hardware Abstraction Layer DLL Microsoft® Windows® Operating System Microsoft Corporation 6.0.6000.16386 (vista_rtm.061101-2205) 32-bit ntkrnlpa.exe+6016e ntkrnlpa.exe+601f9 C:\Windows\Minidump\Mini010912-01.dmp 2 15 6000 137,616
Mini042211-01.dmp 4/22/2011 10:32:51 AM IRQL_NOT_LESS_OR_EQUAL 0x0000000a 0x00000000 0x0000001b 0x00000000 0x81c29160 hal.dll hal.dll+3db3 Hardware Abstraction Layer DLL Microsoft® Windows® Operating System Microsoft Corporation 6.0.6000.16386 (vista_rtm.061101-2205) 32-bit ntkrnlpa.exe+8fe14 ntkrnlpa.exe+29160 ndis.sys+ed7b ndis.sys+da107 C:\Windows\Minidump\Mini042211-01.dmp 2 15 6000 139,200

#4 LucheLibre

LucheLibre

  • Members
  • 608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:10:22 AM

Posted 10 January 2012 - 10:58 PM

Can you think of anything that you or the computer did (uninstalling, installing, updating, malware, was dropped, etc) right before it started acting this way?

Check System File Integrity

  • Click Start Orb and type cmd. In search results, right-click cmd and select Run as Administrator.
  • At the prompt, type sfc /scannow and press Enter. There is a space between "sfc" and "/scannow". This process make take a while.
    • If SFC find errors it cannot correct, it may ask you to insert your Windows CD.
  • If SFC finishes with errors, it will open a log in notepad. Copy the entire contents to your next reply.
  • Run Windows Update immediately if you had to use your Windows CD during this operation.
  • Restart your computer.

===========================================

Edited by LucheLibre, 10 January 2012 - 10:59 PM.

If it looks like I know what I'm doing, there's a pretty good chance the only reason for that is because
I once asked someone to run chkdsk /r and a BC Advisor smacked me in the back of the head.

~ LL ~


#5 muchofrustration

muchofrustration
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:09:22 AM

Posted 11 January 2012 - 12:32 PM

Yes the night before it started doing this, I ran Malware bytes and symantec.

This is what I got when I ran sfc

Microsoft Windows [Version 6.0.6000]
Copyright © 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.Windows Resource Protection found corrupt files b
as unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

The system file repair changes will take effect after the next reboot.

C:\Windows\system32>

***************************************************************************************

That's it. It didn't open a log in notepad. While sfc was running programs started disappearing. Firefox closed, now I can't find it anywhere.
When the scan whas compeleted, I restarted the computer. It installed updates but now many of my programs are missing. Firefox is still gone and there is nothing under "all programs" in the start up menu. The only icons on my desktop that work are internet explorer and the recycle bin.

After windows was restarted "vista anti-spyware" popped up and started scanning. I've never seen this before so I think this may be a virus.

Thanks

#6 muchofrustration

muchofrustration
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:09:22 AM

Posted 11 January 2012 - 12:36 PM

There is a window on my desktop named "interactive services dialog detection" that tells me there is a program that can't display a message on the desktop and it gives me the option of showing the message or being reminded later. When I click "show me the messages" a bunch of boxes from "vista anti-spyware 2012" (or something) starts scanning and telling me that I have a lot of things wrong with my computer.

#7 LucheLibre

LucheLibre

  • Members
  • 608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:10:22 AM

Posted 11 January 2012 - 01:06 PM

Considering what you've posted, I suggest creating a new thread on the Virus, Trojan, Spyware, and Malware Removal Logs board.

Very Important! Carefully read through and follow these instructions before posting.

If it looks like I know what I'm doing, there's a pretty good chance the only reason for that is because
I once asked someone to run chkdsk /r and a BC Advisor smacked me in the back of the head.

~ LL ~


#8 hamluis

hamluis

    Moderator


  • Moderator
  • 55,872 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:22 AM

Posted 11 January 2012 - 07:01 PM

Reference: http://www.bleepingcomputer.com/forums/topic437538.html/page__p__2549081#entry2549081 .

Now that you have properly posted a malware log topic, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users