Confusing Blue Screen
-
Confusing Blue Screen
I am quite unexperienced with complicated computer problems, that's why I am asking for your help
.
Basically, I often get blue screens, with various error stop messages...sometimes they are starting with 0x000000A, other times they are 0x00000C5 or D1...I had this problem once in the past too and by reinstalling the Firewall I got rid of it. But now my computer crashes much too often, even when I try to write a CD.
I tried to run my Nod32 antivirus to check for viruses and it always gives the Blue Screen during this procedure, so I don't know what the outcome of the scan would be. The spyware scans are always clean...
Please help me because I am really scared
...
Thanks
Claudia.
PS: Maybe this offers some insight:
Logfile of HijackThis v1.99.0
Scan saved at 12:14:11, on 04.02.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\YHsmiles\YHsmiles.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\Eset\nod32krn.exe
C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
C:\Program Files\Advanced Registry Doctor\RegManServ.exe
C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Outpost Firewall] C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [YHsmiles] C:\Program Files\YHsmiles\YHsmiles.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\PROGRA~1\Agnitum\OUTPOS~1\TRASH.EXE (HKCU)
O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\PROGRA~1\Agnitum\OUTPOS~1\TRASH.EXE (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1102799206501
O17 - HKLM\System\CCS\Services\Tcpip\..\{7BE69A06-2016-4D8D-842B-1167867DA1C9}: NameServer = 80.96.70.1,80.96.70.2
O23 - Service: NOD32 Kernel Service - Unknown - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Outpost Firewall Service - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
O23 - Service: Registry Management Service - Unknown - C:\Program Files\Advanced Registry Doctor\RegManServ.exe
-
Pleeeeeeease don't ignore my desperate call! You know girls are helpless with PCs...have mercy
.
-
Welcom to D-A-L, we are here to help, but we are volunteers so we are doing this in our spare time. What I would like to know is what the Error is on the blue screen. These messages are sometimes more helpful than just the number. If you get it again while running NOD32 please write it down so that I can find the solution.
-
Thank you for looking at my post and offering to help
.
Well, the blue screen appears either when I run Nod32, either when I ask him to do two processes or more at one time (like read email and open some other program)...or simply without a logical explaination
.
On this blue screen appears IRQL_NOT_LESS_OR_EQUAL...is that what you wanted to know? Because the numbers after STOP ERROR are different each time, as I said: 0x0A, or 0xC5, 0xD1, 0x7F...God knows why they change if the cause is the same...
-
What is the last bit after "..." Just a search on IRQL_NOT_LESS_OR_EQUAL comes up with a general statement of incompatible hardware or software/driver. What CD WRiter software did you install?
-
Nero. Do u want me to run Nod 32 now and make the Blue Screen appears again so that I note all the words of the screen?
-
Please. It will help determine which program/file is causing the problem. Also, did you get any kind of notice that the software was not listed as compatible with XP?
-
No, I never got any notice of non-compatibility. I ran now Nod32 and it's veeery strange what's happening: the Blue Screen is no longer stanrting with the normal text of IRQL_NOT_LESS_OR_EQUAL, but it directly starts with "the windows site for any updates available.
Run the driver verifier against any new (or suspect) drivers...---after this comes the long story about entering in safe mode and diabling these drivers...contact your administrator or hardware manufacturer bla bla bla."
I don't understand why it cuts from the original blue screen parts of the text...
Anyway, I suspect that it may have something to do with an external intervention upon my PC...I mean this thing started just yesterday when I allowed (by mistake) the firewall to let the Windows Messenger (which I DIDN'T REQUEST OPENING, it opened itself out of the blue!!!
) out. When I realized this, I blocked it from the firewall and even reinstalled the firewall, but the problem won't go...
Hmmm...could it also have to do with heating? My compenents are quite crowded in there, but on the other hand...they've been until now as well and there was no trouble with that...only after the Messenger little trick it all started
.
-
Ok, this is starting to sound more and more like a virus. You need to go to one of the online virus scanners. Trend Micro has one call house call. Here is the link.
http://housecall.trendmicro.com/hous...start_corp.asp
Run that first before anything else. There is a worm out there that acts like messenger and can cause some damage. You may want to repost into the Spyware Adware and Virus forum as well:
http://www.d-a-l.com/help/forumdisplay.php?f=8
-
Hmm...imagine...it starts scanning online (I tried at Panda since I don't have Nestcape) and after a while, during the scan, the blue magic strikes back
:It only says like I told you:
A problem has been detected and Windows has been shut down to prevent damage to your computer.
IRQL_NOT_LESS_OR_EQUAL
If this is the first time you get this message, restart your computers. If the problem persists, check to make sure any new hardware or software is properly installed. If this is a new installation, ask your hardware or software manufacturer for any Windows updates your might need.
If problems continue, disable or remove any newly installed hardware or software. Disable BIOS memory options such as caching or shadowing.
***STOP: 0x000000A (0x0000002, 0x00000001, 0x804EE021)