Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

blue screens


  • This topic is locked This topic is locked
3 replies to this topic

#1 j_bins

j_bins

  • Members
  • 117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ireland
  • Local time:04:06 AM

Posted 16 July 2012 - 11:02 AM

Hi,

My computer info is:

Dell Inspiron 6000
BIOS Version A09. 09-28-05
Microsoft Windows XP Home Edition
Intel® Pentium® M processor 1.86GHz
Clock Speed 1.9GHz
L2 Cahce Size 2048
Available Memory 26.10%
Page File Size 1024.0MB
Available Page File 167.57%
Virtual Memory 2047.0MB
Available Virtual Memory 98.03%
Memory Slot1 [DIMM_A] 512MB
Memory Slot2 [DIMM_B] 512MB
Display Adapters ATI MOBILITY RADEON X300 64MB

I am using Kaspetsky Internet Security 2012.

I have recently restored my Dell laptop to its factory state using the Dell system restore feature. I was getting many crashes and blue screens before that.
Things have been OK with my laptop until a couple of days ago when I had two crashes and blue screens saying:

IRQL_Not_Less_Or_Equal

Kernal_stack_in_page_error

I have now performed Windows System restore and done full Kaspersky scans. I am worried that there I am going to continue to have problems.

I mostly use my computer for making music and as its getting a bit old it does get pushed to its limit’s a little. The fan seems to kick in a bit more than it used to, and I wonder if there might be hardware problem?

Any advice would be great thanks. J :)

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:06 AM

Posted 16 July 2012 - 08:55 PM

Hello, we can still run a couple tools to see if something is there.
Do you have service pack 3 installed?

The errors may indicate a driver issue and you may need to post in XP.




Next run Superantisypware (SAS):

Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
    For instructions with screenshots, please refer to the How to use SUPERAntiSpyware to scan and remove malware from your computer Guide.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all other options as they are set):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the Control Center screen.
  • Back on the main screen, under "Select Scan Type" check the box for Complete Scan.
  • If your computer is badly infected, be sure to check the box next to Enable Rescue Scan (Highly Infected Systems ONLY).
  • Click the Scan your computer... button.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the scan log after reboot, launch SUPERAntiSpyware again.
  • Click the View Scan Logs button at the bottom.
  • This will open the Scanner Logs Window.
  • Click on the log to highlight it and then click on View Selected Log to open it.
  • Copy and paste the scan log results in your next reply.
-- Some types of malware will disable security tools. If SUPERAntiSpyware will not install, please refer to these instructions for using the SUPERAntiSpyware Installer. If SUPERAntiSpyware is already installed but will not run, then follow the instructions for using RUNSAS.EXE to launch the program.



Please download aswMBR ( 511KB ) to your desktop.
  • Double click the aswMBR.exe icon to run it
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 j_bins

j_bins
  • Topic Starter

  • Members
  • 117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ireland
  • Local time:04:06 AM

Posted 18 July 2012 - 11:18 AM

Hey Boopme thanks for your reply I really appreciate it,

Ok here goes:

- I have SP3 installed.

- I don't think I have updated my drivers apart from some new ones I downloaded for various hardware after the last Dell System Restore. I think I can get some updated drivers for my machine on the Dell website.
- I ran SAS and then aswMBR. SAS picked up a tracking cookie. aswMBR log was less clear to me. Here are the logs:

----------------------------------------

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/17/2012 at 06:23 PM

Application Version : 5.5.1012

Core Rules Database Version : 8912
Trace Rules Database Version: 6724

Scan type : Complete Scan
Total Scan Time : 00:52:10

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 411
Memory threats detected : 0
Registry items scanned : 33024
Registry threats detected : 0
File items scanned : 33160
File threats detected : 1

Adware.Tracking Cookie
C:\Documents and Settings\Jon\Cookies\TZDGZUYL.txt [ /doubleclick.net ]

--------------------------

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-07-17 18:40:29
-----------------------------
18:40:29.468 OS Version: Windows 5.1.2600 Service Pack 3
18:40:29.468 Number of processors: 1 586 0xD08
18:40:29.468 ComputerName: BP39S1J UserName: Jon
18:41:06.625 Initialize success
18:49:13.484 AVAST engine defs: 12071700
19:02:07.937 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
19:02:07.937 Disk 0 Vendor: HTS726060M9AT00 MH4OA6EA Size: 57231MB BusType: 3
19:02:07.968 Disk 0 MBR read successfully
19:02:07.984 Disk 0 MBR scan
19:02:08.265 Disk 0 unknown MBR code
19:02:08.281 Disk 0 Partition 1 00 DE Dell Utility Dell 4.1 86 MB offset 63
19:02:08.312 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 54156 MB offset 176715
19:02:08.343 Disk 0 Partition 3 00 DB CP/M / CTOS MSWIN4.1 2980 MB offset 111089475
19:02:08.375 Disk 0 scanning sectors +117194175
19:02:08.687 Disk 0 scanning C:\WINDOWS\system32\drivers
19:02:38.484 Service scanning
19:02:48.406 Service KL1 C:\WINDOWS\system32\DRIVERS\kl1.sys **LOCKED** 5
19:02:48.468 Service kl2 C:\WINDOWS\system32\DRIVERS\kl2.sys **LOCKED** 5
19:02:49.343 Service klim5 C:\WINDOWS\system32\DRIVERS\klim5.sys **LOCKED** 5
19:02:49.687 Service klmouflt C:\WINDOWS\system32\DRIVERS\klmouflt.sys **LOCKED** 5
19:03:05.015 Modules scanning
19:03:15.968 Disk 0 trace - called modules:
19:03:16.000 ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
19:03:16.000 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x871655e0]
19:03:16.000 3 CLASSPNP.SYS[f755bfd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x871a2940]
19:03:16.875 AVAST engine scan C:\
19:25:43.468 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Jon\Desktop\Computer Probs\MBR.dat"
19:25:43.500 The log file has been saved successfully to "C:\Documents and Settings\Jon\Desktop\Computer Probs\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-07-17 19:26:30
-----------------------------
19:26:30.468 OS Version: Windows 5.1.2600 Service Pack 3
19:26:30.468 Number of processors: 1 586 0xD08
19:26:30.468 ComputerName: BP39S1J UserName: Jon
19:26:32.000 Initialze error C000010E - driver not loaded
19:26:32.109 write error "aswCmnB.dll". The process cannot access the file because it is being used by another process.
19:26:46.671 AVAST engine defs: 12071700
19:27:18.546 Service scanning
19:27:28.406 Service KL1 C:\WINDOWS\system32\DRIVERS\kl1.sys **LOCKED** 5
19:27:28.453 Service kl2 C:\WINDOWS\system32\DRIVERS\kl2.sys **LOCKED** 5
19:27:28.796 Service klim5 C:\WINDOWS\system32\DRIVERS\klim5.sys **LOCKED** 5
19:27:29.062 Service klmouflt C:\WINDOWS\system32\DRIVERS\klmouflt.sys **LOCKED** 5
19:27:43.203 Modules scanning
19:27:43.218 Disk 0 trace - called modules:
19:27:43.218
19:27:43.687 AVAST engine scan C:\
20:46:01.093 Scan finished successfully
20:52:21.656 The log file has been saved successfully to "C:\Documents and Settings\Jon\Desktop\Computer Probs\aswMBR.txt"

------------------------------


Thankfully I have had no problems yet since the windows system restore I did acouple of days ago. In addition I remebered that I had x3 'soundcards' enabled......Indigo dj PCMCIA sound card, edirol FA-101 firewire and SigmaTel C-major.....I have now removed the Echo because I don't need it at the moment.....I wonder if the three cards together could have been problematic?

Anyway,

Thanks again
:thumbup2:

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:06 AM

Posted 21 July 2012 - 09:16 PM

Hello, this does nor appear to be malware/ Mosy loikely a Hard drive isue. Back up any important data now in case of a failure.

I will re open the XP topic you started.

Mod Edit: Topic closed, XP topic being worked - Hamluis.

Edited by hamluis, 01 August 2012 - 01:55 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users