System has recovered from a serious error

I am new here and need help desperately!!!! My computer randomly shuts off and restarts. When it reboots I get this message.... System has recovered from a serious error. Then I click on the log and I get this....

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
WER3e49.dir00\Mini051411-07.dmp

Also get....

C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\WER3e49.dir00\sysdata.xml

PLEASE HELP!!!

 

Welcome

If you can find the dump file C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
WER3e49.dir00\Mini051411-07.dmp, copy it to the Desktop and then zip it (Right-click the file and select Send to > Compressed folder), you can then attach the zipped file to your next post.

 

Thank you so much for replying!!! I can not find the dump file. Can you help me with this?

 

Ok.... I figured it out! YAY!!! So here is the zip file......

 

I also found this file as well.......

 

Ok, I can see the file - a driver - that's being blamed for this crash, but I'm not sure how to deal with it yet. It's called tffsport.sys and it looks like it belongs to a USB flash memory device, made by M-Systems - DiskOnChip 2000. Does this look familiar to you?

Can you boot the computer into Safe Mode? Repeated tapping of the F5 or F8 keys just as Windows is about to startup should get you there. If you can get in, look in Add/Remove programs for any sign of this software and run the uninstaller please. If you have any USB flash drives/memory sticks, remove them before rebooting to test.

 

I did have to install a flashdrive not too long ago, but it was brand new, right out of the package so maybe???? I will do the safe made and let you know. THANK YOU!!!!!!!

 

Ok I did the safe mode and I do not see any programs by this name. What next???

 

That's the interesting part, I'm not sure.

Do you have your Windows XP CD? Is it Service Pack 3?

Are you familiar with the Windows Registry?

 

I do have the windows xp cd, but it is the service pack 2 and I now have the service pack 3 on the computer. No, I am not familiar with the Windows Registry. I really appreciate your help!

 

I've made a Registry patch that should disable the problematic driver. Download the attachment and extract the Disabletffsport.reg file to your Desktop - if you do this from the problem PC, you can then double-click the reg file to merge it into the Windows Registry. Agree to the prompt asking if you really want to do this ... then there should be a follow up message that tells that it was successful. If you don't see the successful message, then report back with the message or error given.

Once the reg file has been successfully merged, reboot. Report back on progress, any different crashes or problems, etc.

 

I did just as you said and the file did merge successfully! I will let you know if the computer shuts down again by itself. I should know pretty soon if it does like it has been doing. This morning I had a new error message with a new log so I am going to attach that so you can take a look and see if it is the same thing you saw yesterday. I can not thank you enough for all your help!!!!!!!

 

Same errors and cause as the previous BSOD dumps. All you can do is keep using the PC until something else errors, if nothing gives an error/BSOD in the next week or so, it might be fixed - whether we'll discover what the trigger for it was remains to be seen.

 

Well so far I have had no issues this afternoon! Thank you so much for your help!!!!! Hopefully this did the trick!!!!! I am thankful to have found this forum!!!!! You are awesome!!!!! :celebrate

 

No problem; I'm pleased that I worked up the confidence to write that fix, too often we rely on finding fixes written by others - this case was pretty unusual. So, we're all happy

 

Well here goes another problem..... I was so excited, no issuses with shutting down by itself! But now this has happened..... I was online doing a "my contacts backup" with my cell phone company and when I went to add a contact I got a message that DEP was closing this program. Then I got this error signature.....

Event BEX P1:iexplore.exe P2:8.0.6001.18702 P3:49b3ad2e
P4:unknown P5:0.0.0.0 P6:00000000 P7:00000000 P8:c0000065
P9:00000008



The log......

c:\DOCUME~1\HP_ADM~1\
LOCALS~1\Temp\WERf627.dir00\iexplore.exe.mdmp

c:\DOCUME~1\HP_ADM~1\LOCALS\Temp\WERf627.dir00\appcompt.txt


Now while I am sending this an installshield update manager is popping up wanting to check for updates. As you can tell this is all a little foreign to me. I really appreciate all the help you have given me and I'm sorry I am so clueless! Thank you again!!!!!!

 

Hmm, DEP is a security feature, which version of Java are you using? There should be a Java icon in control Panel, check it to find out.

 

It is version 6.0.250

 

That's the latest version so I doubt if the problem lies with that.

Is your XP fully updated with all the Critical patches at least? Which IE version do you have? Can you list the add-ins that are loading with it?

 

Ok, I think the best course of action at this point is to ensure that your computer is clear of malware. Read this post carefully and follow the instructions given, if you get any problems or error messages whilst following it, make notes of them.

 

I have IE 8. I went to manage add ons and this is what it said.......

Name Upromise TurboSaver
Publisher Compete Inc
Status Enabled
File date Tuesday, December 14, 2010, 11:10 AM
Version 7.0.2.8597
Load time 0.43 s

Name DCA BHO
Publisher Compete Inc
Status Enabled
File date Thursday, December 02, 2010, 3:22 PM
Version 1.4.0.4685
Load time 0.06 s

Name Upromise TurboSaver
Publisher Compete Inc
Status Enabled
File date Tuesday, December 14, 2010, 11:10 AM
Version 7.0.2.8597
Load time 1.26 s

Name Upromise TurboSaver
Publisher Compete Inc
Status Enabled
File date Tuesday, December 14, 2010, 11:10 AM
Version 7.0.2.8597
Load time 0.43 s

Name Google Toolbar
Publisher Google Inc
Status Enabled
File date Saturday, February 26, 2011, 8:48 AM
Version 6.6.1409.1944
Load time 0.04 s

Name Google Toolbar Helper
Publisher Google Inc
Status Enabled
File date Saturday, February 26, 2011, 8:48 AM
Version 6.6.1409.1944
Load time 0.03 s

Name Google Toolbar Notifier BHO
Publisher Google Inc
Status Enabled
File date Saturday, February 26, 2011, 10:21 PM
Version 5.6.6209.1142
Load time 0.03 s

Name Google Side Bar
Publisher Google Inc
Status Enabled
File date Saturday, February 26, 2011, 8:48 AM
Version 6.6.1409.1944

Name HP Print Enhancer
Publisher Hewlett-Packard Company
Status Enabled
File date Thursday, October 16, 2008, 6:26 PM
Version 112.200.19110.0
Load time 0.21 s

Name HP Smart BHO Class
Publisher Hewlett-Packard Company
Status Enabled
File date Thursday, October 16, 2008, 6:26 PM
Version 112.200.19110.0
Load time 0.20 s

Name HP Smart Select
Publisher Hewlett-Packard Company
Status Enabled
File date Thursday, October 16, 2008, 6:26 PM
Version 112.200.19110.0

Name Bing Bar
Publisher Microsoft Corporation
Status Disabled
File date Monday, February 28, 2011, 6:44 PM
Version 7.0.609.0
Load time (0.12 s)

Name Windows Live Toolbar
Publisher Microsoft Corporation
Status Disabled
File date Friday, April 16, 2010, 7:55 PM
Version 14.0.8117.416
Load time (6.61 s)

Name Search Helper
Publisher Microsoft Corporation
Status Enabled
File date Wednesday, January 14, 2009, 5:49 PM
Version 1.2.118.0
Load time 0.60 s

Name Windows Live Sign-in Helper
Publisher Microsoft Corporation
Status Enabled
File date Thursday, January 22, 2009, 3:41 PM
Version 5.0.818.5
Load time 0.03 s

Name Bing Bar Helper
Publisher Microsoft Corporation
Status Disabled
File date Monday, February 28, 2011, 6:44 PM
Version 7.0.609.0
Load time (0.02 s)

Name Windows Live Toolbar BHO
Publisher Microsoft Corporation
Status Disabled
File date Friday, April 16, 2010, 7:55 PM
Version 14.0.8117.416
Load time (1.09 s)

Name Research
Publisher Microsoft Corporation
Status Enabled
File date Thursday, April 19, 2007, 2:10 PM
Version 11.0.8164.0

Name Blog This in Windows Live Writer
Publisher Not Available
Status Enabled
Version 1.0.0.0

Name Research
Publisher Not Available
Status Enabled

Name Spybot - Search & Destroy Configuration
Publisher Not Available
Status Enabled
Version 1.6.0.0

Name Connection Help
Publisher Not Available
Status Enabled

Name Diagnose Connection Problems...
Publisher Not Available
Status Enabled

Name Windows Messenger
Publisher Not Available
Status Enabled

Name Connection Help
Publisher Not Available
Status Enabled

Name Discuss
Publisher Not Available
Status Enabled
Version 6.0.2900.5969

Name Spybot-SD IE Protection
Publisher Safer Networking Ltd.
Status Enabled
File date Monday, January 26, 2009, 3:31 PM
Version 1.6.0.0
Load time 0.08 s

Name Java(tm) Plug-In 2 SSV Helper
Publisher Sun Microsystems, Inc.
Status Enabled
File date Friday, May 13, 2011, 6:32 PM
Version 6.0.250.6
Load time 1.51 s

Name JQSIEStartDetectorImpl Class
Publisher Sun Microsystems, Inc.
Status Enabled
File date Friday, May 13, 2011, 6:32 PM
Version 6.0.250.6
Load time 0.03 s

Name Yahoo! Toolbar
Publisher Yahoo! Inc.
Status Disabled
File date Thursday, May 15, 2008, 3:40 PM
Version 7.0.10.0
Load time (0.03 s)

Name Yahoo! Toolbar Helper
Publisher Yahoo! Inc.
Status Disabled
File date Thursday, May 15, 2008, 3:40 PM
Version 7.0.10.0
Load time (0.00 s)

I'm not sure if this is what you are wanting so just let me know. XP is updated with critical updates. Is that the same as patches?

 

Ok I will start that now. Thank you!!!!!

 

That reads like a lot of add-ons so IE has all the critical updates, good, that's most important, it means that it's fully patched from a security viewpoint.

 

Ok I have hit a road block......... I have gotten all the way to the combofix and it will not install. I get an error that states installation failed. What do I do now????:cry

 

You should really be posting that question in the Malware forum, the folks there are experts with it, I'm not. Do the instructions not give alternative methods of installing it? Change the name of Combofix first or install it from Safe Mode with networking?