Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Blue Screen of Death!  (Read 4627 times)

0 Members and 1 Guest are viewing this topic.

A10 Tactical

    Topic Starter


    Beginner

    • Experience: Beginner
    • OS: Unknown
    Blue Screen of Death!
    « on: January 24, 2012, 09:39:42 PM »
    I have been getting blue screens a lot in the last few days on my computer:

    Windows 7 Home Premium 64 Bit
    Dell Inspiron 545
    Pentium Dual Core ES400 @ 2.70ghz
    RAM 6 GB

    Recently when I login to windows and sometimes its right when im in the middle of work. I have run Ad-aware, Kasperky, Ccleaner and Super Anti Spyware. Super did find 3 bad looking files which I was able to successfully remove but alas the blue screens still come...The blue screen is only up for about 5 seconds max and then the computer manually restarts which is aggravating. I do get prompted with a fatal crash response upon reboot which is:

    Problem signature:
      Problem Event Name:   BlueScreen
      OS Version:   6.1.7600.2.0.0.768.3
      Locale ID:   1033

    Additional information about the problem:
      BCCode:   e4
      BCP1:   0000000000000001
      BCP2:   FFFFF88002DE0C00
      BCP3:   0000000000000000
      BCP4:   0000000000000000
      OS Version:   6_1_7600
      Service Pack:   0_0
      Product:   768_1

    Files that help describe the problem:
      C:\WINDOWS\Minidump\012412-32588-01.dmp
      C:\Users\anna chapman.annachapman-PC\AppData\Local\Temp\WER-91572-0.sysdata.xml

    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt

    I took 3 screenshots of my processes in msconfig but it doesn't look like I can upload them on here. I would appreciate any help you guys might have to fix this problem. No hardware changes have occurred to this computer either.

    jason2074



      Egghead

    • It doesn't matter.
    • Thanked: 224
    • Experience: Beginner
    • OS: Windows 7
    Re: Blue Screen of Death!
    « Reply #1 on: January 25, 2012, 12:36:43 AM »
    Download BlueScreenView (in Zip file) then unzip(extract by right clicking) and run Bluescreenview.
    Go to Edit -Select All, File and Saved Selected Item. Create a name for the report, just make sure it is a .txt extension file like Report.txt. Copy/Paste ALL the created report on your next post.

    A10 Tactical

      Topic Starter


      Beginner

      • Experience: Beginner
      • OS: Unknown
      Re: Blue Screen of Death!
      « Reply #2 on: January 25, 2012, 05:44:26 AM »
      Okay I was able to download that Blue Screen View Program. I noticed when I opened it that there was 6 Entries in the upper portion so I just saved them all to .txt file just to be safe. Those 6 reports will be Report1, Report2, Report3, Report4, Report5 & Report6.txt with Report 1 being the most recent. Also on the lower portion of the screen I noticed many entries however only one was highlighted in red so I saved that red entry as ReportBottom.txt.

      If there is anything I missed please let me know!

      **EDIT**
      Okay for some reason this site wont let me attach these files so im going to have to paste them in the message in the same order I mentioned above.

      Report1
      ==================================================
      Dump File         : 012412-32588-01.dmp
      Crash Time        : 1/24/2012 10:15:21 PM
      Bug Check String  : WORKER_INVALID
      Bug Check Code    : 0x000000e4
      Parameter 1       : 00000000`00000001
      Parameter 2       : fffff880`02de0c00
      Parameter 3       : 00000000`00000000
      Parameter 4       : 00000000`00000000
      Caused By Driver  : ntoskrnl.exe
      Caused By Address : ntoskrnl.exe+71f00
      File Description  : NT Kernel & System
      Product Name      : Microsoft® Windows® Operating System
      Company           : Microsoft Corporation
      File Version      : 6.1.7600.16385 (win7_rtm.090713-1255)
      Processor         : x64
      Crash Address     : ntoskrnl.exe+71f00
      Stack Address 1   :
      Stack Address 2   :
      Stack Address 3   :
      Computer Name     :
      Full Path         : C:\Windows\Minidump\012412-32588-01.dmp
      Processors Count  : 2
      Major Version     : 15
      Minor Version     : 7600
      Dump File Size    : 276,440
      ==================================================

      Report2
      ==================================================
      Dump File         : 012412-23758-01.dmp
      Crash Time        : 1/24/2012 10:13:44 PM
      Bug Check String  : DRIVER_OVERRAN_STACK_BUFFER
      Bug Check Code    : 0x000000f7
      Parameter 1       : 00002b99`05b545d0
      Parameter 2       : 00002b99`2ddfa232
      Parameter 3       : ffffd466`d2205dcd
      Parameter 4       : 00000000`00000000
      Caused By Driver  : msrpc.sys
      Caused By Address : msrpc.sys+1616
      File Description  :
      Product Name      :
      Company           :
      File Version      :
      Processor         : x64
      Crash Address     : ntoskrnl.exe+71f00
      Stack Address 1   :
      Stack Address 2   :
      Stack Address 3   :
      Computer Name     :
      Full Path         : C:\Windows\Minidump\012412-23758-01.dmp
      Processors Count  : 2
      Major Version     : 15
      Minor Version     : 7600
      Dump File Size    : 276,440
      ==================================================

      Report 3
      ==================================================
      Dump File         : 012412-23368-01.dmp
      Crash Time        : 1/24/2012 10:12:15 PM
      Bug Check String  : SYSTEM_SERVICE_EXCEPTION
      Bug Check Code    : 0x0000003b
      Parameter 1       : 00000000`c0000005
      Parameter 2       : fffff800`02d7157a
      Parameter 3       : fffff880`01f65c90
      Parameter 4       : 00000000`00000000
      Caused By Driver  : ntoskrnl.exe
      Caused By Address : ntoskrnl.exe+71f00
      File Description  : NT Kernel & System
      Product Name      : Microsoft® Windows® Operating System
      Company           : Microsoft Corporation
      File Version      : 6.1.7600.16385 (win7_rtm.090713-1255)
      Processor         : x64
      Crash Address     : ntoskrnl.exe+71f00
      Stack Address 1   :
      Stack Address 2   :
      Stack Address 3   :
      Computer Name     :
      Full Path         : C:\Windows\Minidump\012412-23368-01.dmp
      Processors Count  : 2
      Major Version     : 15
      Minor Version     : 7600
      Dump File Size    : 276,440
      ==================================================

      Report4
      ==================================================
      Dump File         : 012412-24476-01.dmp
      Crash Time        : 1/24/2012 10:10:44 PM
      Bug Check String  : IRQL_NOT_LESS_OR_EQUAL
      Bug Check Code    : 0x0000000a
      Parameter 1       : 00000000`00000008
      Parameter 2       : 00000000`00000002
      Parameter 3       : 00000000`00000000
      Parameter 4       : fffff800`02a9f591
      Caused By Driver  : ataport.SYS
      Caused By Address : ataport.SYS+161a0
      File Description  :
      Product Name      :
      Company           :
      File Version      :
      Processor         : x64
      Crash Address     : ntoskrnl.exe+71f00
      Stack Address 1   :
      Stack Address 2   :
      Stack Address 3   :
      Computer Name     :
      Full Path         : C:\Windows\Minidump\012412-24476-01.dmp
      Processors Count  : 2
      Major Version     : 15
      Minor Version     : 7600
      Dump File Size    : 276,440
      ==================================================

      Report 5
      ==================================================
      Dump File         : 012412-23805-01.dmp
      Crash Time        : 1/24/2012 10:09:36 PM
      Bug Check String  : IRQL_NOT_LESS_OR_EQUAL
      Bug Check Code    : 0x0000000a
      Parameter 1       : 00000000`00000000
      Parameter 2       : 00000000`00000002
      Parameter 3       : 00000000`00000000
      Parameter 4       : fffff800`02aa6c06
      Caused By Driver  : ntoskrnl.exe
      Caused By Address : ntoskrnl.exe+71f00
      File Description  : NT Kernel & System
      Product Name      : Microsoft® Windows® Operating System
      Company           : Microsoft Corporation
      File Version      : 6.1.7600.16385 (win7_rtm.090713-1255)
      Processor         : x64
      Crash Address     : ntoskrnl.exe+71f00
      Stack Address 1   :
      Stack Address 2   :
      Stack Address 3   :
      Computer Name     :
      Full Path         : C:\Windows\Minidump\012412-23805-01.dmp
      Processors Count  : 2
      Major Version     : 15
      Minor Version     : 7600
      Dump File Size    : 276,440
      ==================================================

      Report 6
      ==================================================
      Dump File         : 012412-23899-01.dmp
      Crash Time        : 1/24/2012 10:08:04 PM
      Bug Check String  : KMODE_EXCEPTION_NOT_HANDLED
      Bug Check Code    : 0x0000001e
      Parameter 1       : ffffffff`c0000005
      Parameter 2       : fffff800`02a784d8
      Parameter 3       : 00000000`00000000
      Parameter 4       : ffffffff`ffffffff
      Caused By Driver  : atapi.sys
      Caused By Address : atapi.sys+16e4
      File Description  :
      Product Name      :
      Company           :
      File Version      :
      Processor         : x64
      Crash Address     : ntoskrnl.exe+71f00
      Stack Address 1   :
      Stack Address 2   :
      Stack Address 3   :
      Computer Name     :
      Full Path         : C:\Windows\Minidump\012412-23899-01.dmp
      Processors Count  : 2
      Major Version     : 15
      Minor Version     : 7600
      Dump File Size    : 276,448
      ==================================================

      Report Bottom
      ==================================================
      Filename          : ntoskrnl.exe
      Address In Stack  : ntoskrnl.exe+2155a8
      From Address      : fffff800`02a65000
      To Address        : fffff800`03042000
      Size              : 0x005dd000
      Time Stamp        : 0x4a5bc600
      Time String       : 7/13/2009 5:40:48 PM
      Product Name      : Microsoft® Windows® Operating System
      File Description  : NT Kernel & System
      File Version      : 6.1.7600.16385 (win7_rtm.090713-1255)
      Company           : Microsoft Corporation
      Full Path         : C:\Windows\system32\ntoskrnl.exe
      ==================================================



      [year+ old attachment deleted by admin]

      A10 Tactical

        Topic Starter


        Beginner

        • Experience: Beginner
        • OS: Unknown
        Re: Blue Screen of Death!
        « Reply #3 on: January 25, 2012, 10:06:45 AM »
        It looks like there was a rootkit on the computer. I was able to remove it with TDSSkiller...it is one *censored* of a lifesaver program that I recommend to anyone who had a problem as bad as this.