Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD related to Trusteer Rapport


  • Please log in to reply
3 replies to this topic

#1 Aneurinski

Aneurinski

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:20 PM

Posted 03 September 2013 - 04:45 PM

I decided to start my own thread after reading this thread and not being able to implement the solutions suggested because the machine blue screens on its own after a couple minutes. Most issues I've come across in my searches have only had it blue screen when they do something specific, for example accessing the bank's website to trigger the Rapport driver to be used and then causing a blue screen. For this particular PC that I'm working with though, it blue screened almost immediately after installing Rapport and then it blue screens shortly after logging into the PC. As a result, I cannot do any of the troubleshooting from the PC itself. I have its hard drive hooked to my work PC by way of a USB hard drive dock, and its 

 

 

Following along with the first thing that was suggested in the other thread, I've got the BlueScreenView text here:

 

==================================================
Dump File         : Mini090313-21.dmp
Crash Time        : 9/3/2013 1:25:13 PM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe38a1000
Parameter 3       : 0xe38a10d8
Parameter 4       : 0x0c1b0800
Caused By Driver  : ati2mtag.sys
Caused By Address : ati2mtag.sys+244950
File Description  : ATI Radeon WindowsNT Miniport Driver
Product Name      : ATI Radeon WindowsNT Miniport Driver
Company           : ATI Technologies Inc.
File Version      : 6.14.10.6925
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : ntoskrnl.exe+15d695
Stack Address 3   : ntoskrnl.exe+15dcd7
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-21.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 1:45:57 PM
==================================================
 
==================================================
Dump File         : Mini090313-20.dmp
Crash Time        : 9/3/2013 12:33:24 PM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe248eac8
Parameter 3       : 0xe248eb90
Parameter 4       : 0x0c190802
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-20.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:36:22 PM
==================================================
 
==================================================
Dump File         : Mini090313-19.dmp
Crash Time        : 9/3/2013 12:27:23 PM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe10e9e70
Parameter 3       : 0xe10e9f38
Parameter 4       : 0x0c190419
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-19.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:29:08 PM
==================================================
 
==================================================
Dump File         : Mini090313-18.dmp
Crash Time        : 9/3/2013 12:24:26 PM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe18249a0
Parameter 3       : 0xe18249c8
Parameter 4       : 0x0c050201
Caused By Driver  : RapportCerberus32_56758.sys
Caused By Address : RapportCerberus32_56758.sys+5cd8
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : ntoskrnl.exe+15d695
Stack Address 3   : ntoskrnl.exe+15dcd7
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-18.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:26:11 PM
==================================================
 
==================================================
Dump File         : Mini090313-17.dmp
Crash Time        : 9/3/2013 12:12:31 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x805f8af4
Parameter 3       : 0xb9a97a60
Parameter 4       : 0x00000000
Caused By Driver  : Npfs.SYS
Caused By Address : Npfs.SYS+4b6e
File Description  : NPFS Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.5512 (xpsp.080413-2111)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+121af4
Stack Address 1   : Npfs.SYS+4b6e
Stack Address 2   : Npfs.SYS+1dcc
Stack Address 3   : Npfs.SYS+1e42
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-17.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:14:07 PM
==================================================
 
==================================================
Dump File         : Mini090313-16.dmp
Crash Time        : 9/3/2013 12:09:31 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x805beb93
Parameter 3       : 0xb9ae7aec
Parameter 4       : 0x00000000
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+e7b93
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6387 (xpsp_sp3_qfe.130503-0418)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+e7b93
Stack Address 1   : ntoskrnl.exe+e8390
Stack Address 2   : ntoskrnl.exe+e4a48
Stack Address 3   : ntoskrnl.exe+9f051
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-16.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:11:20 PM
==================================================
 
==================================================
Dump File         : Mini090313-15.dmp
Crash Time        : 9/3/2013 12:05:35 PM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe2d9ec08
Parameter 3       : 0xe2d9ec90
Parameter 4       : 0x0c110610
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-15.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:07:13 PM
==================================================
 
==================================================
Dump File         : Mini090313-14.dmp
Crash Time        : 9/3/2013 12:02:23 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x8054b10d
Parameter 3       : 0xa85ceb04
Parameter 4       : 0x00000000
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+7410d
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6387 (xpsp_sp3_qfe.130503-0418)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+7410d
Stack Address 1   : ntoskrnl.exe+7475f
Stack Address 2   : ntoskrnl.exe+e9c85
Stack Address 3   : ntoskrnl.exe+9f051
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-14.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:04:00 PM
==================================================
 
==================================================
Dump File         : Mini090313-13.dmp
Crash Time        : 9/3/2013 11:59:27 AM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe1daec78
Parameter 3       : 0xe1daed00
Parameter 4       : 0x0c110801
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-13.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 12:01:06 PM
==================================================
 
==================================================
Dump File         : Mini090313-12.dmp
Crash Time        : 9/3/2013 11:56:13 AM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe1130870
Parameter 3       : 0xe1130938
Parameter 4       : 0x0c19040b
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-12.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:57:51 AM
==================================================
 
==================================================
Dump File         : Mini090313-11.dmp
Crash Time        : 9/3/2013 11:53:26 AM
Bug Check String  : NTFS_FILE_SYSTEM
Bug Check Code    : 0x00000024
Parameter 1       : 0x001902fe
Parameter 2       : 0x9a918508
Parameter 3       : 0x9a918204
Parameter 4       : 0xb9588e16
Caused By Driver  : Ntfs.sys
Caused By Address : Ntfs.sys+24e16
File Description  : NT File System Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.5512 (xpsp.080413-2111)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : Ntfs.sys+dff0
Stack Address 2   : Ntfs.sys+55943
Stack Address 3   : sr.sys+7f70
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-11.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:55:04 AM
==================================================
 
==================================================
Dump File         : Mini090313-10.dmp
Crash Time        : 9/3/2013 11:50:33 AM
Bug Check String  : NTFS_FILE_SYSTEM
Bug Check Code    : 0x00000024
Parameter 1       : 0x001902fe
Parameter 2       : 0x9b6a14fc
Parameter 3       : 0x9b6a11f8
Parameter 4       : 0xb9588e16
Caused By Driver  : Ntfs.sys
Caused By Address : Ntfs.sys+24e16
File Description  : NT File System Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.5512 (xpsp.080413-2111)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : Ntfs.sys+dff0
Stack Address 2   : Ntfs.sys+31033
Stack Address 3   : ntoskrnl.exe+181f9
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-10.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:52:11 AM
==================================================
 
==================================================
Dump File         : Mini090313-09.dmp
Crash Time        : 9/3/2013 11:47:43 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x8054b10d
Parameter 3       : 0x9a575a80
Parameter 4       : 0x00000000
Caused By Driver  : mfeapfk.sys
Caused By Address : mfeapfk.sys+10500
File Description  : Access Protection Filter Driver
Product Name      : SYSCORE
Company           : McAfee, Inc.
File Version      : SYSCORE.15.0.0.537
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+7410d
Stack Address 1   : ntoskrnl.exe+7475f
Stack Address 2   : mfehidk.sys+1be09
Stack Address 3   : mfehidk.sys+1be5c
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-09.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:49:21 AM
==================================================
 
==================================================
Dump File         : Mini090313-08.dmp
Crash Time        : 9/3/2013 11:44:55 AM
Bug Check String  : NTFS_FILE_SYSTEM
Bug Check Code    : 0x00000024
Parameter 1       : 0x001902fe
Parameter 2       : 0x9b22e360
Parameter 3       : 0x9b22e05c
Parameter 4       : 0xb958e1f3
Caused By Driver  : Ntfs.sys
Caused By Address : Ntfs.sys+2a1f3
File Description  : NT File System Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.5512 (xpsp.080413-2111)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : Ntfs.sys+dff0
Stack Address 2   : Ntfs.sys+55943
Stack Address 3   : sr.sys+7f70
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-08.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:46:34 AM
==================================================
 
==================================================
Dump File         : Mini090313-07.dmp
Crash Time        : 9/3/2013 11:42:07 AM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe1110dd8
Parameter 3       : 0xe1110e60
Parameter 4       : 0x0c110602
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-07.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:43:46 AM
==================================================
 
==================================================
Dump File         : Mini090313-06.dmp
Crash Time        : 9/3/2013 11:38:52 AM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe34ed410
Parameter 3       : 0xe34ed5c8
Parameter 4       : 0x0c370038
Caused By Driver  : Ntfs.sys
Caused By Address : Ntfs.sys+3e626
File Description  : NT File System Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.5512 (xpsp.080413-2111)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : Ntfs.sys+3e626
Stack Address 3   : Ntfs.sys+3e5b9
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-06.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:40:31 AM
==================================================
 
==================================================
Dump File         : Mini090313-05.dmp
Crash Time        : 9/3/2013 11:36:02 AM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe1190890
Parameter 3       : 0xe1190958
Parameter 4       : 0x0c190610
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-05.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:37:40 AM
==================================================
 
==================================================
Dump File         : Mini090313-04.dmp
Crash Time        : 9/3/2013 11:33:10 AM
Bug Check String  : BAD_POOL_HEADER
Bug Check Code    : 0x00000019
Parameter 1       : 0x00000020
Parameter 2       : 0xe13a5a10
Parameter 3       : 0xe13a5a98
Parameter 4       : 0x0c110204
Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.
File Version      : 8.0.0.1741
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : HipShieldK.sys+16b4c
Stack Address 3   : HipShieldK.sys+6983
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-04.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:34:53 AM
==================================================
 
==================================================
Dump File         : Mini090313-03.dmp
Crash Time        : 9/3/2013 11:28:48 AM
Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code    : 0x10000050
Parameter 1       : 0xf373a1ce
Parameter 2       : 0x00000001
Parameter 3       : 0x8054b10d
Parameter 4       : 0x00000002
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+7410d
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6387 (xpsp_sp3_qfe.130503-0418)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+7410d
Stack Address 1   : ntoskrnl.exe+7475f
Stack Address 2   : ntoskrnl.exe+e8f2e
Stack Address 3   : ntoskrnl.exe+e92a6
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-03.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:30:26 AM
==================================================
 
==================================================
Dump File         : Mini090313-02.dmp
Crash Time        : 9/3/2013 11:25:01 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0x8063443a
Parameter 3       : 0x9a2b1880
Parameter 4       : 0x00000000
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+15d43a
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6387 (xpsp_sp3_qfe.130503-0418)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+15d43a
Stack Address 1   : ntoskrnl.exe+15e122
Stack Address 2   : ntoskrnl.exe+158289
Stack Address 3   : ntoskrnl.exe+1590aa
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-02.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:26:36 AM
==================================================
 
==================================================
Dump File         : Mini090313-01.dmp
Crash Time        : 9/3/2013 11:22:00 AM
Bug Check String  : NTFS_FILE_SYSTEM
Bug Check Code    : 0x00000024
Parameter 1       : 0x001902fe
Parameter 2       : 0xb9cfb90c
Parameter 3       : 0xb9cfb608
Parameter 4       : 0xb95869ef
Caused By Driver  : Ntfs.sys
Caused By Address : Ntfs.sys+229ef
File Description  : NT File System Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.5512 (xpsp.080413-2111)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : Ntfs.sys+dff0
Stack Address 2   : Ntfs.sys+55ed0
Stack Address 3   : ntoskrnl.exe+61923
Computer Name     : 
Full Path         : E:\WINDOWS\Minidump\Mini090313-01.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/3/2013 11:23:41 AM
==================================================
 

Because I can't actually boot the PC with this drive in it, I don't think I can run MiniToolbox, and I know for sure I can't run speccy. Here are the solutions I've tried so far:

 

1. Tried to boot into safe mode, with and without networking. Every time I try it gets stuck on an agp driver and never boots to safe mode.

2. I've tried to rename the rapportkell.sys driver to something else (Solution found by a co-worker of mine, not sure where he got the info)

3. I've tried to rename the folder C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\baseline (As found here)

4. I've tried to rename the file RapportCerberus32_56758.sys (Personal extrapolation from attempt #3 as well as several other searches which suggested that this file was the troublemaker)

 

Any help would be appreciated



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,116 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:20 PM

Posted 03 September 2013 - 05:17 PM

Well...the problems encountered by another person with another system...doesn't necessarily translate into valid cross-referencing to your own system.

 

BSODs occur for a variety of reasons...from malware to hardware problems to file corruption...and it's unlikely (IMO) that two systems will suffer a variety of BSODs for similar/same reasons.

 

With the hard drive connected to your worki system...did you try running the chkdsk /r command on the troubled drive?

 

Louis

 

I see that your Blue Screen data is from the troubled drive.

 

A quick look at that and I'd say that you have serious file corruption or serious partition/hard drive problems.  I see 3 notations re NTFS.sys errors and these can be indicative of partition/file system/hard drive problems.

 

If not done, please run the chkdsk /r command on the E: drive/partition.


Edited by hamluis, 03 September 2013 - 05:27 PM.


#3 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:04:20 AM

Posted 03 September 2013 - 07:07 PM

Hello -

Please continue as hamluis has said for now, but also read this.

 

Caused By Driver  : HipShieldK.sys
Caused By Address : HipShieldK.sys+16b4c
File Description  : McAfee HIP IPS Driver
Product Name      : McAfee Host Intrusion Prevention
Company           : McAfee, Inc.

Plus several others .......

Caused By Driver  : mfeapfk.sys
Caused By Address : mfeapfk.sys+10500
File Description  : Access Protection Filter Driver
Product Name      : SYSCORE
Company           : McAfee, Inc.
File Version      : SYSCORE.15.0.0.537

 

Crash Time        : 9/3/2013 12:33:24 PM
Crash Time        : 9/3/2013 12:27:23 PM
Crash Time        : 9/3/2013 12:05:35 PM
Crash Time        : 9/3/2013 11:59:27 AM
Crash Time        : 9/3/2013 11:56:13 AM
Crash Time        : 9/3/2013 11:47:43 AM
Crash Time        : 9/3/2013 11:42:07 AM
Crash Time        : 9/3/2013 11:36:02 AM
Crash Time        : 9/3/2013 11:33:10 AM

 

The only common theme running among ALL of these crashes is your McAfee Antivirus and its drivers -

 

My first option is to naturally say "Delete McAfee from your system fully".

If this is a private (only) computer, then your version of McAfee is corrupted, and should be replaced.

 

If this is in any way hooked to a company or school system, then this is still the problem, but you need to be aware that McAfee is your Main problem, and still needs removal.

 

Just my opinion on your logs -

 

Thank You -



#4 Aneurinski

Aneurinski
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:20 PM

Posted 04 September 2013 - 12:34 PM

Thanks for the replies. The dump data was all from my troubled drive. From what I know about Rapport its purpose is to prevent the execution of any spyware, viruses, or malware someone might have on their machine when connecting to the bank in order to prevent data theft. Since it behaves like an antivirus/antispyware program it conflicts with our existing one, which is McAfee, so I can see how those drivers would be having a fit. The weird thing is that in most of the research I've done Rapport doesn't start executing until the user tries to connect to the bank's website, but in my case it seems to start running at startup and causes all sorts of other drivers to break, which gives me a blue screen about a minute after logging in. It's caused enough damage for the PC to not even boot into safe mode, and running the Startup repair from the XP disc also gets stuck in a boot loop.

 

I will run the chkdsk against the troubled drive before I try to copy the user's data from it, but we've decided that the best course of action since we can't get the PC to boot to a usable state is to swap a working hard drive into their PC and start from scratch. Their PC was skipped over a couple years ago on the transition to Windows 7 because of some software we had to use at the time but don't anymore, so this is as good a time as any to get them a little bit more up to date.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users