blue screen and other tales of woe - can anyone help

stefejb

First of all please go gently and slowly and explain any big words as I haven't a clue about these things.

after my old computer died my son in law cobbled one together for me and reinstalled this and that. all went well for a few months until my dad decided to put a sound card in for me and windows failed completely. Son in law has taken the sound card out again and fiddled with I don't know what but it still crashes in a horribly random blue screen way and needs the windows disc to boot each time. I have done a hijack this log. The first thing you'l notice is that I'm running avast and kaspersky - I can't seem to uninstall kaspersky so just exit it at start up. Avast has put these things in it's chest but I don't know what to do with them
kernell32.dll
winsock.dll
wsock32.dll
although I have scanned them and they say that there's no virus



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:29:08, on 03/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
F:\Program Files\Alwil Software\Avast4\ashServ.exe
F:\WINDOWS\system32\LEXBCES.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\LEXPPS.EXE
F:\WINDOWS\system32\cisvc.exe
F:\Program Files\Java\jre6\bin\jqs.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\SearchIndexer.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Canon\CAL\CALMAIN.exe
F:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
F:\Program Files\Java\jre6\bin\jusched.exe
F:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
F:\WINDOWS\system32\carpserv.exe
F:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
F:\WINDOWS\Mixer.exe
F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
F:\Program Files\Messenger\msmsgs.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
F:\Program Files\Windows Desktop Search\WindowsSearch.exe
F:\Program Files\OpenOffice.org 2.4\program\soffice.exe
F:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
F:\Program Files\Outlook Express\msimn.exe
F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\WINDOWS\system32\SearchProtocolHost.exe
F:\WINDOWS\system32\wuauclt.exe
F:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
F:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
F:\Program Files\Alwil Software\Avast4\setup\avast.setup
F:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://forums.moneysavingexpert.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - !!02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Link Helper - !!18DF081C-E8AD-4283-A596-FA578C2EBDC3} - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - !!59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - !!761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Lexmark X1100 Series] "F:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [AVP] "F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = F:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = F:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Windows Search.lnk = F:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Web traffic protection statistics - !!1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Research - !!92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: !!30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - F:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: !!6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1224288322258
O16 - DPF: !!6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1222195259750
O17 - HKLM\System\CCS\Services\Tcpip\..\!!5322A404-C353-41A4-9553-5FE1F4B1782D}: NameServer = 213.40.2.245 213.40.66.245
O20 - AppInit_DLLs: F:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,F:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,F:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - F:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - F:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - F:\WINDOWS\system32\LEXBCES.EXE

I would like to spend some time with my poor son in law that doesn't involve him hunched over the pc with screwdriver in hand

ineedmoremoney

do a new install try that

stefejb

ineedmoremoney wrote: »

do a new install try that

yikes :eek: is it as bad as that?

thomas01155

kernell32.dll
winsock.dll
wsock32.dll
The reason there in the chest is because avast is protecting them(this is normal). Have you tried system restore?

stefejb

thomas01155 wrote: »

kernell32.dll
winsock.dll
wsock32.dll
The reason there in the chest is because avast is protecting them(this is normal). Have you tried system restore?

yes I've tried loads of restore points but they just don't work. Thanks for the reasurrance though

thomas01155

Try a repair install and if that doesn't work it might be best to reinstall the whole thing.

free4440273

What's the duration between having removed sound card and the pc crashing, just out of interest??

(Love the sig:cool:

stefejb

pretty much within hours

Colin_Jensen

Hi there,

It is more common for a blue screen of death to be an actual hardware fault.

I would try checking your memory using "Memtest" (Use google to find out more) and simply boot it up and let it run. It is very easy to use and if you have any faulty module(s) you will see a scrolling list of red.

However, if the memory passes try check the hard drive. You might have a bad sector on the platters. Depending on how many bad sectors you actually you have you may beable to remap them to another area of the drive. You need to use a hard drive diagnostics boot disk to check this, such as Seatools or something similiar. Alternatively you could "low level" format your hard drive this will remap the sectors for you.

Diagnostic applications really need to be booted OUT OF WINDOWS, applications running in windows cannot access all resources on the machine as readily.

EDIT - ONE OTHER THING
One other possible cause of blue screens of death is the cpu overheating, check the heat sink and fan attached to the motherboard. It is very common for fans to get gunked up with hair and dust, even worse if you are a smoker - that tar build up is horrible.

aliEnRIK

Have you tried uninstalling the 'sound' drivers?

Delme

Whilst a reinstall is an option, it is the last thing I'd do. However saying that it does cut to the chase of it being a hardware or software problem. But, I recently experienced the Blue Screen of death on my PC too. It just started happening without me installing anything at all.

I am something of a computer geek who has been using computers for years and like Colin_Jensen I'd recommend a memory test because I eventually diagnosed my problem to be with one chunk of RAM. Once that was removed, the problem left.

I did have a similar problem to this years back too. I bought myself and wife new Ram from PC World (it was cheap ram) and I had to return both sets of Ram because the blue screen happened on both machines after a months use. It took a while to convince them their Ram was rubbish but they did let me exchange it for more expensive Ram which fixed the problem. Like tools, it's worth spending a bit more cash.

You can easily check to see if the Ram is a problem by taking a chunk out and using the computer for a while (presuming of course you have more than one stick in there).

Something else of note, the fact kaspersky won't uninstall is a bit weird (very likely NOT to be related to your blue screen problem though). I personally wouldn't recommend running two virus programs at the same time just because they will probably find problems with each other. If you don't think one program is safe enough, remove it and get use a different one (which is probably what you are trying to do by removing kaspersky I guess). For your info I use Avast too on its own but it is the chance your take. If you still want to remove kaspersky I recommend checking out their website and see if there is a forum like this one with folk who may have experienced the same problem. Something you could try is updating kaspersky with the lastest update/version then try uninstalling it. As I said though I'd guess this is unrelated to your blue screen joy.

Good Luck.