Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

still blue screening


  • Please log in to reply
12 replies to this topic

#1 arizonaredhead

arizonaredhead

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 25 June 2012 - 10:40 PM

Okay, this started like 6 weeks ago, I posted to thia forum and got some replies and instructions for running utilities and posting logs. Removed the Dolphin screen saver that we thought was the problem, but now instead of it blue screening after he has walked away from his pc (you know, leaving it running probably logged into his Moshi Monsters account) he got a BSOD while he was playing the game. I took pictures of the error code. This is what it said- STOP: 0x0000008E (0x0000005, 0xB2A279E8, 0x00000000)

Please, please, please help me!

Edited by hamluis, 29 June 2012 - 09:02 PM.
Moved from XP to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:04 PM

Posted 25 June 2012 - 10:57 PM

Attach your minidump files in your next reply.

http://h30434.www3.hp.com/t5/Noteboo...es/td-p/253475


Please download MINITOOLBOX and run it.

Checkmark following boxes:


List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go and post the result.



Please go here and download Speccy run the program and when it is finished Hit File >>>>>>Publish Snap Shot>>>> A link will pop-up on your desktop please post it here in your next reply.

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 55,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:04 PM

Posted 26 June 2012 - 06:36 AM

Is this the same computer that you "rebuilt" back in March?

Please...Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 .

Louis

#4 Allan

Allan

  • BC Advisor
  • 8,586 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:07:04 PM

Posted 26 June 2012 - 07:08 AM

Download BlueScreenView:
http://www.nirsoft.net/utils/blue_screen_view.html
unzip downloaded file and double click on BlueScreenView.exe to run the program.
when scanning is done, go to EDIT - Select All
Go to FILE - SAVE Selected Items, and save the report as BSOD.txt
Open BSOD.txt in Notepad, copy all of the content, and paste it into your next reply

#5 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 26 June 2012 - 08:22 PM

No, to the rebuilt in march question. That was my desktop pc. Answering you from mine. Will go log on to the boy's and continue.

#6 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:04 PM

Posted 26 June 2012 - 08:31 PM

No, to the rebuilt in march question. That was my desktop pc. Answering you from mine. Will go log on to the boy's and continue.


please see my post as I can gather a lot more info than the bluescreen view app with the actual minidump files. :)

#7 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 26 June 2012 - 08:49 PM

Okay so it looks like I have at least two people responding to my plea for help,

> Here is the BlueScreenView info


==================================================
Dump File : Mini062512-01.dmp
Crash Time : 6/25/2012 8:29:47 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb2a279e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98fb0
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6228 (xpsp_sp3_gdr.120515-1618)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98fb0
Stack Address 2 : win32k.sys+98af7
Stack Address 3 : win32k.sys+9c91
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini062512-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini062412-01.dmp
Crash Time : 6/24/2012 10:36:31 AM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0x5e19ab5e
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x8a850dc8
Caused By Driver : kmixer.sys
Caused By Address : kmixer.sys+1dc8
File Description : Kernel Mode Audio Mixer
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+6d768
Stack Address 1 : kmixer.sys+1dc8
Stack Address 2 : kmixer.sys+22a7
Stack Address 3 : ntkrnlpa.exe+f8fbe
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini062412-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini061512-01.dmp
Crash Time : 6/15/2012 7:14:31 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x81bffffc
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aab4
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+22f5f
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f5f
Stack Address 1 : ntkrnlpa.exe+493ae
Stack Address 2 : ntkrnlpa.exe+6d600
Stack Address 3 : ntkrnlpa.exe+63ab4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini061512-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini061012-01.dmp
Crash Time : 6/10/2012 10:43:23 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x99621be0
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aab4
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+22f5f
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f5f
Stack Address 1 : ntkrnlpa.exe+493ae
Stack Address 2 : ntkrnlpa.exe+6d600
Stack Address 3 : ntkrnlpa.exe+63ab4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini061012-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini060112-01.dmp
Crash Time : 6/1/2012 8:25:14 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x817ffffc
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aab4
Parameter 4 : 0x00000000
Caused By Driver : USBPORT.SYS
Caused By Address : USBPORT.SYS+1aeae
File Description : USB 1.1 & 2.0 Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f5f
Stack Address 1 : ntkrnlpa.exe+493ae
Stack Address 2 : ntkrnlpa.exe+6d600
Stack Address 3 : ntkrnlpa.exe+63ab4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini060112-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini052712-01.dmp
Crash Time : 5/27/2012 2:42:34 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb6a6e9e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98f48
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6228 (xpsp_sp3_gdr.120515-1618)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98f48
Stack Address 2 : win32k.sys+98a8f
Stack Address 3 : win32k.sys+9c81
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052712-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051812-01.dmp
Crash Time : 5/18/2012 7:23:28 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb48629e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98f48
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6228 (xpsp_sp3_gdr.120515-1618)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98f48
Stack Address 2 : win32k.sys+98a8f
Stack Address 3 : win32k.sys+9c81
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051812-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051412-01.dmp
Crash Time : 5/14/2012 5:32:07 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb611a9e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98f48
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6228 (xpsp_sp3_gdr.120515-1618)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98f48
Stack Address 2 : win32k.sys+98a8f
Stack Address 3 : win32k.sys+9c81
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051412-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051312-02.dmp
Crash Time : 5/13/2012 2:12:46 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb3e899e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98f48
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6228 (xpsp_sp3_gdr.120515-1618)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98f48
Stack Address 2 : win32k.sys+98a8f
Stack Address 3 : win32k.sys+9c81
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051312-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051312-01.dmp
Crash Time : 5/13/2012 11:02:37 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x817ffffc
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aab4
Parameter 4 : 0x00000000
Caused By Driver : nv4_mini.sys
Caused By Address : nv4_mini.sys+6ee0b
File Description : NVIDIA Compatible Windows 2000 Miniport Driver, Version 175.19
Product Name : NVIDIA Compatible Windows 2000 Miniport Driver, Version 175.19
Company : NVIDIA Corporation
File Version : 6.14.11.7519
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f5f
Stack Address 1 : ntkrnlpa.exe+493ae
Stack Address 2 : ntkrnlpa.exe+6d600
Stack Address 3 : ntkrnlpa.exe+63ab4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051312-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051012-01.dmp
Crash Time : 5/10/2012 3:28:33 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x817ffffc
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aaa4
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+22f43
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f43
Stack Address 1 : ntkrnlpa.exe+4939a
Stack Address 2 : ntkrnlpa.exe+6d5f0
Stack Address 3 : ntkrnlpa.exe+63aa4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051012-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini050712-01.dmp
Crash Time : 5/7/2012 2:19:23 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a923
Parameter 3 : 0xaddfc9e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98fe8
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6228 (xpsp_sp3_gdr.120515-1618)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63923
Stack Address 1 : win32k.sys+98fe8
Stack Address 2 : win32k.sys+98b2f
Stack Address 3 : win32k.sys+9c91
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini050712-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================


And here is the attached MiniDump fileAttached File  minidump.zip   3.38KB   2 downloads

#8 Allan

Allan

  • BC Advisor
  • 8,586 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:07:04 PM

Posted 27 June 2012 - 06:59 AM

Multiple and varied bsod's can be caused by a number of issues, ranging from ram to hd to a bad motherboard or other hardware - or malware. One of the errors (the one involving kmixer.sys) hint's that malware MAY be a cause. Can you please run full system scans with both your AV and with MalwareBytes before we proceed further? If they come up clean, the next steps will be checking the ram and then the hd.

#9 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 27 June 2012 - 09:11 PM

Sure, no prob. be back tomorrow!

#10 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 29 June 2012 - 08:06 PM

Ran the scan, found several Trojans, many PUPs, got rid of most, restarted and am running the scan again. It takes awhile.

#11 hamluis

hamluis

    Moderator


  • Moderator
  • 55,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:04 PM

Posted 29 June 2012 - 08:56 PM

Moving topic to Am I Infected forum.

Louis

#12 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 29 June 2012 - 09:14 PM

Okay, so now both my problem pc are here in the "am i infected forum" so should I reboot into safemode and download and run TFC like on the pc?

#13 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:04:04 PM

Posted 30 June 2012 - 01:48 PM

Well, I went ahead and used SAS and AMB to scrub and rinse my son's and both of my pcs (since we are all on the same WLAN) and I fould the same two Trojans on all three,. Got rid of those. But while I had my son's booted into safemode w/networking it started beeping, not through the speakers, but from inside the case. So I thought "uhoh, that is a hardware issue crying out. I took in the state of my son's room (disaster area/demilitarized zone) and decide the first step was to open the case and get a can of air. I could have grown potatoes in there! So after the dirt was blown out of the CPU fan and everwhere else, I restarted and the beeping was gone. Unfortunately when I restarted, I found the machine wanting to run a disk check, but everything seems okay. Thanks for all your help. If the problem continues, should I come back to this post or start a new one?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users