labtop problems - blue screen

View previous topic View next topic Go down

labtop problems - blue screen

Post by AnotherGuy on 5th February 2011, 8:25 pm

my Families laptop recently started running into a blue screen on start up. At the moment I have it working but it takes about 5 minutes or so from the windows loading screen to get to the user accounts log in if it doesn't reset somewhere in between.
The blue screen doesn't stay long enough to be read so i don't know what the problem is and we haven't installed anything new onto it. other than on start up and a bit after log ins, the blue screen appeared earlier today while avg was running a scan although i don't think its related.
we use Windows xp service pack 3

AnotherGuy
Novice
Novice

Posts Posts : 10
Joined Joined : 2011-02-01
OS OS : Windows XP Home Edition, Version 2002, Sevice Pack 3
Protection Protection : AVG Free 2011
Points Points : 21486
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by INeedHelp on 8th February 2011, 3:26 pm

Looks to me you have a virus, maybe you should post this in virus and malware section.

INeedHelp
Intermediate
Intermediate

Posts Posts : 103
Joined Joined : 2009-01-17
Gender Gender : Male
OS OS : Windows Vista Ultimate 64-Bit/Windows 7 Pro x64-bit/Windows XP Pro SP3
Protection Protection : KasperSky
Points Points : 29860
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by AnotherGuy on 9th February 2011, 3:57 pm

It might have been a virus because I could still get onto the computer but yesterday it completely stopped working when turned on.
Safe modes, old working configuration and starting normally all lead to a BSOD that says something about a corrupt or missing registry.

My brother is the one that was using it yesterday so I haven't checked the safe modes but I did see the BSOD when I tried to start windows normally. I will post again when I know the full error message.

Its a laptop that doesn't have a cd drive and it came pre-installed so I don't know what I will be able to do when trying to fix it yet.

AnotherGuy
Novice
Novice

Posts Posts : 10
Joined Joined : 2011-02-01
OS OS : Windows XP Home Edition, Version 2002, Sevice Pack 3
Protection Protection : AVG Free 2011
Points Points : 21486
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by houndmom on 9th February 2011, 5:09 pm

Welcome! Glad to have you here. Hooray!
Please read here
Then post in the malware forum here
One of the awesome techs will help you as soon as they can!


If we have helped you, Please consider helping us,  make a donation.

Helping fight malware.

houndmom
Leader's Leader
Leader's Leader

Posts Posts : 1053
Joined Joined : 2010-04-27
Gender Gender : Female
OS OS : Windows 7 ultimate
Protection Protection : Bitdefender Total Security 2010
Points Points : 29797
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by Capt.Jack Sparrow on 9th February 2011, 7:04 pm

Hi there,

Please post us the Dump files. Follow this link How to ask help for BSOD - GeekPolice


Regards,
Captain MVP


It is considered
courteous to  post a reply if you have been able to resolve your problem, or received  an answer to your question.

Capt.Jack Sparrow
Senior
Senior

Posts Posts : 321
Joined Joined : 2010-09-27
Gender Gender : Male
OS OS : Windows 7 Ultimate, Ubuntu 10.04
Protection Protection : Avast, WinPatrol, Malwarebytes, Windows Firewall
Points Points : 26968
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by AnotherGuy on 10th February 2011, 1:11 am

I have absolutely no way to access any windows programs because of the error so I can't get the current dump files for this blue screen.
I might have old dump files from before this happened but it probably won't help with the current problem. Should I post those?

My brother thinks spybot S&D might have removed or blocked a registry of something about low priority files. Best I can do at the moment.

I would like to know what I might be able to do once I know what the problem is. Because the laptop can't use CDs is there some way I can repair the registry using a usb drive? Or will i need to take the hard drive out and run it through a different computer?

AnotherGuy
Novice
Novice

Posts Posts : 10
Joined Joined : 2011-02-01
OS OS : Windows XP Home Edition, Version 2002, Sevice Pack 3
Protection Protection : AVG Free 2011
Points Points : 21486
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by Disruption on 10th February 2011, 2:18 am

If you can't retrieve the newer ones, old ones may do. Your issue can be related to Software as well. Have you installed any new things in the time of these blue screens?

Disruption
Senior
Senior

Posts Posts : 252
Joined Joined : 2010-12-02
Gender Gender : Male
OS OS : Windows 7
Points Points : 22963
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by AnotherGuy on 10th February 2011, 1:57 pm

Older ones I found
mediafire.com ?5k12rl7m6ano1a5
sorry about using mediafire.

I don't know exactly what was new but Spybot S&D and my brother trying to get minecraft to work on the laptop are the only recent changes I know of other than making a network bridge to connect xbox live though the laptop a couple of weeks ago.
I think spybot did something to cause the current problem.
I don't have a decent camera and haven't been able to figure out how to catch a shot of the blue screen.

Don't know if it would help at all but
http://gdgt.com/acer/aspire/one/zg5/specs/
this is the laptop that is having these problems.

AnotherGuy
Novice
Novice

Posts Posts : 10
Joined Joined : 2011-02-01
OS OS : Windows XP Home Edition, Version 2002, Sevice Pack 3
Protection Protection : AVG Free 2011
Points Points : 21486
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by AnotherGuy on 12th February 2011, 5:24 pm

I got onto my system using, if only partially, the information here
http://www.GeekPolice.net/t26034-i-don-t-know-why#176458
and found my files are all still there, as far as I can tell.

The files in the link I provided were older than I thought, and probably useless, because at some point the function that records the crash information was disabled in the options I could get to and I'm unable to turn them on yet.

I copied some of the SpyBot S&D logs and info about what was removed/blocked by the program, and was wondering if this might have something to do with the current problem.

[FraudAVSecuritySuite.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.AVSecuritySuite
Description=Settings
Date=07/02/2011 12:44:58 AM
Destination=HKEY_USERS\.DEFAULT\Software\AVSuitE
Type=Registry

[FraudAVSecuritySuite1.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.AVSecuritySuite
Description=Settings
Date=07/02/2011 12:44:59 AM
Destination=HKEY_USERS\S-1-5-18\Software\AVSuitE
Type=Registry

[FraudSysguard.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.Sysguard
Description=User settings
Date=07/02/2011 12:44:59 AM
Destination=HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Associations\LowRiskFileTypes
Type=Registry

[FraudSysguard1.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.Sysguard
Description=User settings
Date=07/02/2011 12:45:00 AM
Destination=HKEY_USERS\S-1-5-21-179543653-3168300381-3902444442-1006\Software\Microsoft\Windows\CurrentVersion\Policies\Associations\LowRiskFileTypes
Type=Registry

[FraudSysguard2.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.Sysguard
Description=User settings
Date=07/02/2011 12:45:00 AM
Destination=HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Associations\LowRiskFileTypes
Type=Registry

[FraudSysguard3.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.Sysguard
Description=Settings
Date=07/02/2011 12:45:00 AM
Destination=HKEY_USERS\.DEFAULT\Software\avsoft
Type=Registry

[FraudSysguard4.zip]
File=C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\sbRecovery.reg
Product=Fraud.Sysguard
Description=Settings
Date=07/02/2011 12:45:01 AM
Destination=HKEY_USERS\S-1-5-18\Software\avsoft
Type=Registry


AnotherGuy
Novice
Novice

Posts Posts : 10
Joined Joined : 2011-02-01
OS OS : Windows XP Home Edition, Version 2002, Sevice Pack 3
Protection Protection : AVG Free 2011
Points Points : 21486
# Likes # Likes : 0

View user profile

Back to top Go down

Re: labtop problems - blue screen

Post by Capt.Jack Sparrow on 22nd February 2011, 9:57 pm

Hi there,

Sorry about the late replay. Looked at the Dump files and it's pointing to aswMon2.SYS avast! File System Filter Driver for Windows XP. Uninstall Avast completely and use the Removal Tool if possible,

Code:
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 804e13d0, The address that the exception occurred at
Arg3: f7c86a38, Exception Record Address
Arg4: f7c86734, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!IopfCallDriver+28
804e13d0 8b7108          mov    esi,dword ptr [ecx+8]

EXCEPTION_RECORD:  f7c86a38 -- (.exr 0xfffffffff7c86a38)
ExceptionAddress: 804e13d0 (nt!IopfCallDriver+0x00000028)
  ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
  Parameter[0]: 00000000
  Parameter[1]: 00000008
Attempt to read from address 00000008

CONTEXT:  f7c86734 -- (.cxr 0xfffffffff7c86734)
eax=00000004 ebx=86fc2008 ecx=00000000 edx=86fc2008 esi=00000000 edi=86fc2204
eip=804e13d0 esp=f7c86b00 ebp=f7c86b24 iopl=0        nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000            efl=00010282
nt!IopfCallDriver+0x28:
804e13d0 8b7108          mov    esi,dword ptr [ecx+8] ds:0023:00000008=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  00000008

READ_ADDRESS:  00000008

FOLLOWUP_IP:
aswMon2+6850
a9b66850 ??              ???

BUGCHECK_STR:  0x7E

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from a9b66850 to 804e13d0

STACK_TEXT: 
f7c86b00 a9b66850 87361a68 85f66230 86202020 nt!IopfCallDriver+0x28
WARNING: Stack unwind information not available. Following frames may be wrong.
f7c86b24 a9b6083c 86202020 00fc2008 804e13d9 aswMon2+0x6850
f7c86b54 804ee6db 87361a0c f7c86b7c f7c86c10 aswMon2+0x83c
f7c86c2c 804edbfb e1bdddc8 e1bdddcc e1bdddcc nt!MiFlushSectionInternal+0x3c3
f7c86c68 804eeb5d 873800c0 00001772 00001000 nt!MmFlushSection+0x1c5
f7c86cf0 804ed89c 00001000 00000000 00000001 nt!CcFlushCache+0x3a0
f7c86d34 804e67c8 873c0288 8056a5c0 873c2c10 nt!CcWriteBehind+0x119
f7c86d7c 804e23b5 873c0288 00000000 873c2c10 nt!CcWorkerThread+0x12f
f7c86dac 80575723 873c0288 00000000 00000000 nt!ExpWorkerThread+0xef
f7c86ddc 804ec6d9 804e22f1 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  aswMon2+6850

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswMon2

IMAGE_NAME:  aswMon2.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  498a51ea

STACK_COMMAND:  .cxr 0xfffffffff7c86734 ; kb

FAILURE_BUCKET_ID:  0x7E_aswMon2+6850

BUCKET_ID:  0x7E_aswMon2+6850

Followup: MachineOwner


Regards,
Captain MVP


It is considered
courteous to  post a reply if you have been able to resolve your problem, or received  an answer to your question.

Capt.Jack Sparrow
Senior
Senior

Posts Posts : 321
Joined Joined : 2010-09-27
Gender Gender : Male
OS OS : Windows 7 Ultimate, Ubuntu 10.04
Protection Protection : Avast, WinPatrol, Malwarebytes, Windows Firewall
Points Points : 26968
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum