Blue Screen STOP: 0x0000008

Discussion in 'Malware Help (A Specialist Will Reply)' started by mikeRa20, Mar 20, 2009.

  1. mikeRa20

    mikeRa20 Private E-2

    i originally posted in harware but then got directed to the malware forum

    couple of days ago my computer started to stop working after a little while.
    symtoms being: not able to save files or open them, net running very slow

    then would get blue screen on shutting down with :

    a problem has been detected and windows has shut down to prevent
    damage to your computer. if this is the first time restart your compmuter. If
    this appears again follow these steps (something about video adapter, bios
    update and disabling bios memory)

    Techincal info:
    STOP: 0x0000008E (0xC0000005, and a variety of other numbers that
    seemed to always change ie. 0x805266AA, 0xFYA71A5C and the last one
    being 0x00000000)

    Then the message would appear on most startups, i found that after running in safe mode then restarting and selecting "last know good settings" i could get windows running.

    Every time the computer started it would run chkdsk and tell me d: was dirty and something about type NTSF

    I updated my bios (dell 9100 A03 from A01) and ran chkdsk f\

    still same problem.

    upon a few more restarts my computer has now been getting the blue screen even in safe mode.

    still the usual message with STOP 0x0000008E however i noticed once it had 0x000000F4(0x00000003, 0x86272AA0, 0x86272C14, 0x805D297C)

    from memory it was after the message with 0x000000F4 that it would even start in safe mode, however all subsequent tries have been getting the 0x0000008E tech info.

    not sure if its related but my dvd drive stopped working a while back model: phillips DVD8701

    any help would be greatly appreciated.

    I havnt been able to do the do this first since lately havnt even been able to get comp working in safe mode but will continue to try.
     
    mikeRa20, Mar 20, 2009
    #1
  2. mikeRa20

    mikeRa20 Private E-2

    finished the read & run me first. and logs are attached

    still having problems although it does seem that i do manage to get the computer on more often.

    SAS crashed (STOP c000021a) the first time but finished the second time after making the suggested option changes.

    got a new blue screen error occasionally: STOP 0x000000F4

    also before i ran the scans i couldnt get into msconfig it said it couldnt find it but since completing scans it can find it.

    thanks in advance
     

    Attached Files:

    mikeRa20, Mar 21, 2009
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your problems may not be due to malware but we do have a little more to do.

    I really need the c:\combofix.txt log requested in the instructions to properly continue but I will post something to get you started.


    Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

    Uninstall the below old versions of software:
    Java(TM) 6 Update 7

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O4 - HKCU\..\RunOnce: [DelayShred] "c:\program files\mcafee.com\shredder\SHRED32.EXE" /q C:\WINDOWS\Debug\PASSWD.SH! C:\DOCUME~1\2\LOCALS~1\Temp\~DFB8.SH! C:\DOCUME~1\2\LOCALS~1\Temp\~DFA9F.SH! C:\DOCUME~1\2\LOCALS~1\Temp\~DFD844.SH! C:\WINDOWS\Temp\SQ7EBB~1.SH! C:\WINDOWS\Temp\SQC6CD~1.SH! C:\WINDOWS\Temp\SQ268E~1.SH! C:\WINDOWS\Temp\SQC795~1.SH! C:\WINDOWS\Temp\SQ5BCB~1.SH! C:\WINDOWS\Temp\SQ5AAD~1.SH! C:\WINDOWS\Temp\MCAFEE~4.SH! C:\WINDOWS\Temp\PERFLI~2.SH! C:\WINDOWS\Temp\MCMSC_~2.SH! C:\WINDOWS\Temp\SQ5FD6~1.SH! C:\WINDOWS\Temp\SQ9FFF~1.SH! C:\DOCUME~1\2\LOCALS~1\temp\~DF1745.SH! C:\WINDOWS\Temp\SQB9D5~1.SH! C:\WINDOWS\Temp\SQLITE~2.SH! C:\WINDOWS\Temp\MCAFEE~1.SH! C:\WINDOWS\Temp\PERFLI~1.SH! C:\WINDOWS\Temp\MCMSC_~1.SH! C:\WINDOWS\Temp\MCMSC_~3.SH! C:\WINDOWS\Temp\MCMSC_~4.SH! C:\DOCUME~1\2\LOCALS~1\temp\~DF90CC.SH! C:\MGtools.SH!
    O15 - Trusted Zone: *.avsystemcare.com
    O15 - Trusted Zone: http://login.live.com
    O15 - Trusted Zone: *.onerateld.com
    O15 - Trusted Zone: *.safetydownload.com
    O15 - Trusted Zone: *.trustedantivirus.com
    O15 - Trusted Zone: *.virusschlacht.com
    O15 - Trusted Zone: *.avsystemcare.com (HKLM)
    O15 - Trusted Zone: *.onerateld.com (HKLM)
    O15 - Trusted Zone: *.safetydownload.com (HKLM)
    O15 - Trusted Zone: *.trustedantivirus.com (HKLM)
    O15 - Trusted Zone: *.virusschlacht.com (HKLM)
    O24 - Desktop Component 0: Privacy Protection - (no file)

    After clicking Fix, exit HJT.

    After a reboot, install the current version of Sun Java from: Sun Java Runtime Environment

    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    Now run Ccleaner!

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

    Then attach the below log:
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    chaslang, Mar 24, 2009
    #3
  4. mikeRa20

    mikeRa20 Private E-2

    sorry about the combofix log missing, i've attached it this time.

    i managed to run through all the steps you gave me easy enough once once windows eventually ran properly. got a couple of blue screens before i managed to install the java update but was smooth sailing after.

    i did get a success messge about adding to the registry.

    so far things seem better( comp running a bit better, icons not blank) i'll post again after a few restarts to let you know further about how things are working now... (havnt restarted since the reboot you instructed me to do after HJT)

    thanks heaps for your help
     

    Attached Files:

    mikeRa20, Mar 25, 2009
    #4
  5. mikeRa20

    mikeRa20 Private E-2

    here's what happened upon restart:

    still chckdsk run, and something about D: volume dirty, NTFS

    when logged into windows some icons missing again on desktop and start menu (maybe b/c of system restore? i didnt toggle it)

    after a few minutes got blue screen:

    0x0000008E (0xc0000005,0x8057AAC1, 0xF7A75448, 0x00000000)
     
    mikeRa20, Mar 25, 2009
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Too bad you did not post it in your first msg. Now we need to run another fix since ComboFix shows one problem.



    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O24 - Desktop Component 0: Privacy Protection - (no file)

    After clicking Fix, exit HJT.


    Now we need to use ComboFix to remove a bunch of malware files.
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
    • Open Notepad and copy/paste the text in the below quote box into it:
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe
    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below
    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.

    Now run Ccleaner to clean out only temp files and nothing else!

    Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

    Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )


    Now attach the below log:
    • C:\ComboFix.txt
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    Last edited: Apr 2, 2009
    chaslang, Mar 29, 2009
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    These do not appear to be malware problems. If the still occur after my last fix, you will have to post about them in the Software Forum.
     
    chaslang, Mar 29, 2009
    #7
  8. mikeRa20

    mikeRa20 Private E-2

    i got through all the steps a lot easier this time, no blue screens

    i had problem down loading MG, and after a bit net wouldnt load pages completly aan mouse pointer flickered. I tried logging out but then got a windows popup about user password(this has happened occasionaly since problem started) so i shutdown comp instead.

    Started up again, windows worked but chkdsk still running on startup.

    MG downloaded and ran no problems this time.
    After awhile internet stopped loading properly and mouse flicked.

    A few icons are are still blank/generic on desktop and start menu.

    No blue screen crashes since.

    thanks
     

    Attached Files:

    mikeRa20, Mar 29, 2009
    #8
  9. mikeRa20

    mikeRa20 Private E-2

    Just started having problems again:

    tried to open a word file but when clicking to open file couldnt be found.
    shutdown comp and got a bluescreen.

    restarted in safe mode which worked and could find word file.
    shutdown OK

    restart got blue screen before chkdsk:
    0x0000008E (0x000005, 0x8057AAC1,0xF7A31414, 0x00000000)
     
    mikeRa20, Mar 29, 2009
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to post about these crash issues and your icon issues in the Software Forum. Someone can help you debug the memory dumps from your crashes. You can use a procedure written by one of our admins (Adrynalyne) to do this. The link to do this is on his website here:A Basic Tutorial on Debugging Memory Dumps

    Your memory dumps are in your Windows folder
    Code:
    C:\Windows\
2009-03-26 05:04 90,112 --sha-w c:\windows\DUMP9bbf.tmp
2009-03-25 09:46 90,112 --sha-w c:\windows\DUMPfdaa.tmp
2009-03-25 00:54 90,112 ----a-w c:\windows\DUMP89ed.tmp
2009-03-21 10:05 90,112 --sha-w c:\windows\DUMP12f8.tmp
2009-03-21 09:20 90,112 ----a-w c:\windows\DUMP7f5e.tmp
2009-03-21 08:52 90,112 --sha-w c:\windows\DUMP727d.tmp
2009-03-21 07:33 90,112 ----a-w c:\windows\DUMP42d2.tmp
2009-03-21 05:45 90,112 --sha-w c:\windows\DUMP9a87.tmp
2009-03-20 06:15 90,112 ----a-w c:\windows\DUMP2ebd.tmp
2009-03-20 06:03 90,112 ----a-w c:\windows\DUMP2f98.tmp
2009-03-20 05:47 90,112 ----a-w c:\windows\DUMP100a.tmp
2009-03-20 05:28 90,112 --sha-w c:\windows\DUMPf4a2.tmp
2009-03-20 00:21 90,112 ----a-w c:\windows\DUMPf1a4.tmp
2009-03-19 05:18 90,112 --sha-w c:\windows\DUMP023e.tmp
2009-03-18 00:58 90,112 --sha-w c:\windows\DUMPce4d.tmp
2009-03-17 23:02 90,112 ----a-w c:\windows\DUMPd061.tmp
2009-03-16 10:30 90,112 --sha-w c:\windows\DUMPe4d3.tmp
2009-03-15 22:36 90,112 --sha-w c:\windows\DUMPd16a.tmp
     
    chaslang, Apr 2, 2009
    #10

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds