We're aware that some users are experiencing technical issues which the team are working to resolve. See the Community Noticeboard for more info. Thank you for your patience.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Blue Screen

Options
badger09
badger09 Posts: 11,577 Forumite
Part of the Furniture 10,000 Posts Name Dropper
in Techie Stuff
Hope some kind person can help.

Over the last couple of days my 7 year old Dell PC on XP (SP3) has been crashing with Blue Screen.
Error message Invalid_Process_Attach_Attempt
STOP: 0x00000005 then other numbers which differ each time.

Last night I rebooted in Safe mode and did a system restore back to 19 May (an achievement for me as I'm not at all techie). I also managed to run a MSE and Malwarebytes quick scan, which found nothing.

Its happened again this morning. Started ok then after a few minutes it crashed. I've tried to find help elsewhere but don't really understand :o

I haven't installed any new software or hardware for ages - just the regular updates from Microsoft. The only thing I've used is a Kingston Data Locker, butI've used it many times and always shut it down before removing.

Sorry for long post :o
«134

Comments

  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    Post me a DDS log - should take 2-3 minutes.

    Download DDS from the link below and save it to your desktop:

    Link

    After you've downloaded it and saved it to your desktop:
    • Double click DDS to run it.
    • Click Start
    • When it's finished, DDS will open two logs:
    1. DDS.txt
    2. Attach.txt
    Save both reports to your desktop.

    Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)
  • Nicholas-bloody-Parsons
    Nicholas-bloody-Parsons Posts: 209 Forumite
    No idea on this. BSoD errors can be tricky to fix.

    As a precautionary measure, I would backup your personal data to DVD disk or pen drive.

    I would start with the following:-

    1. Run the windows update.
    2. Check you are running the latest drivers for your hardware, by visiting the DELL website.

    It may be worth re-installing drivers or software that may have got corrupted recently.
  • badger09
    badger09 Posts: 11,577 Forumite
    Part of the Furniture 10,000 Posts Name Dropper
    @ waddler8 & Nicholas-bloody-Parsons

    Thanks both. Had to break off for a while. Since posting I also tried the Start in Last Known Good Configuration option in Safe mode -same Blue Screen:(

    Will do DDS log and post asap
    (Using netbook for these posts)
  • badger09
    badger09 Posts: 11,577 Forumite
    Part of the Furniture 10,000 Posts Name Dropper
    waddler_8 wrote: »
    Post me a DDS log - should take 2-3 minutes.

    Download DDS from the link below and save it to your desktop:

    Link

    I can't connect to internet in safe mode? :(
  • dodger1
    dodger1 Posts: 4,579 Forumite
    I can only speak for my PC. I had the bluescreen problem which gradually got worse and worse. Eventually I got a local PC guy to look at it and he advised removing one of the RAM (memory cards) (if that's the correct terminology) and testing the PC and if that didn't work put that one back and do the same with the other one.

    That's exactly what I did and it worked. One of the cards must have been corrupted, I bought two new ones and no more bluescreen. This is what I mean by RAM (memory card)

    http://static6.depositphotos.com/1105309/596/i/450/dep_5968130-Isolated-PC-memory-RAM.jpg
    It's someone else's fault.
  • rmg1
    rmg1 Posts: 3,159 Forumite
    Part of the Furniture 1,000 Posts Name Dropper
    badger09 wrote: »
    I can't connect to internet in safe mode? :(

    You'll need to select "Safe Mode with Networking" which should help.
    :wall: Flagellation, necrophilia and bestiality - Am I flogging a dead horse? :wall:

    Any posts are my opinion and only that. Please read at your own risk.
  • badger09
    badger09 Posts: 11,577 Forumite
    Part of the Furniture 10,000 Posts Name Dropper
    rmg1 wrote: »
    You'll need to select "Safe Mode with Networking" which should help.

    Yes that was what I tried. Couldn't connect to internet and also noticed I couldn't enter any text:eek:

    Will try again.

    Thanks
  • badger09
    badger09 Posts: 11,577 Forumite
    Part of the Furniture 10,000 Posts Name Dropper
    waddler_8 wrote: »
    Post me a DDS log - should take 2-3 minutes.

    Download DDS from the link below and save it to your desktop:

    Link

    After you've downloaded it and saved it to your desktop:
    • Double click DDS to run it.
    • Click Start
    • When it's finished, DDS will open two logs:
    1. DDS.txt
    2. Attach.txt
    Save both reports to your desktop.

    Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

    I've run dds and have saved 2 reports
    Notepad (short report) and attach Notepad (much longer)

    I've posted the short one

    Really puzzled by the 1st couple of lines as I thought I'd uninstalled AVG years ago and definitely keep MSE updated

    DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
    Internet Explorer: 8.0.6001.18702
    Run by Administrator at 15:38:49 on 2013-05-31
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.206 [GMT 1:00]
    .
    AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
    .
    ============== Running Processes ================
    .
    c:\Program Files\Microsoft Security Client\MsMpEng.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k NetworkService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.dell.co.uk/myway
    uSearch Bar = hxxp://bfc.myway.com/search/de_srchlft.html
    uDefault_Page_URL = hxxp://www.dell.co.uk/myway
    uURLSearchHooks: {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - <orphaned>
    dURLSearchHooks: {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - <orphaned>
    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    EB: Real.com: {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\shdocvw.dll
    uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
    mRun: [DLBTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLBTtime.dll,_RunDLLEntry@16
    mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [KernelFaultCheck] c:\windows\system32\dumprep 0 -k
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
    dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\windows\system32\msjava.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE}
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    DPF: Microsoft XML Parser for Java - [URL]file://c:\windows\java\classes\xmldso.cab[/URL]
    DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://support.microsoft.com/Dcode/ActiveX/MSDcode.cab
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - hxxp://aolcc.aolsvc.aol.co.uk/computercheckup/qdiagcc.cab
    DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-30.cab
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1167431727343
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
    DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
    TCP: NameServer = 212.23.6.100 212.23.3.100
    TCP: Interfaces\{6F86000A-D285-40E6-8168-810BD4D33258} : DHCPNameServer = 212.23.6.100 212.23.3.100
    Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - c:\program files\common files\pure networks shared\platform\puresp4.dll
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
    Notify: igfxcui - igfxdev.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\program files\windows defender\MpShHook.dll
    LSA: Authentication Packages = msv1_0 relog_ap
    .
    ============= SERVICES / DRIVERS ===============
    .
    S0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 195296]
    S1 axwrbuih;axwrbuih;\??\c:\windows\system32\drivers\axwrbuih.sys --> c:\windows\system32\drivers\axwrbuih.sys [?]
    S1 MpKsl79d53317;MpKsl79d53317;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{642b7216-1b19-4a31-bc20-f9f239d300bd}\mpksl79d53317.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{642b7216-1b19-4a31-bc20-f9f239d300bd}\MpKsl79d53317.sys [?]
    S1 RapportCerberus_50414;RapportCerberus_50414;c:\documents and settings\all users\application data\trusteer\rapport\store\exts\rapportcerberus\baseline\RapportCerberus32_50414.sys [2013-3-6 316984]
    S1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2013-2-13 102680]
    S1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2013-2-13 173880]
    S2 gupdate1c9bcfb23b42dd6;Google Update Service (gupdate1c9bcfb23b42dd6);c:\program files\google\update\GoogleUpdate.exe [2009-4-14 133104]
    S2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2013-2-13 1124184]
    S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\all users\application data\skype\toolbars\skype c2c service\c2c_service.exe [2013-5-14 3289208]
    S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-7 161384]
    S2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
    S3 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2013-2-13 102008]
    S3 w300mgmt;Sony Ericsson W300 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\w300mgmt.sys [2007-8-2 87824]
    S3 w300obex;Sony Ericsson W300 USB WMC OBEX Interface;c:\windows\system32\drivers\w300obex.sys [2007-8-2 85696]
    .
    =============== File Associations ===============
    .
    ShellExec: FRONTPG.EXE: edit=c:\progra~1\micros~3\office\FRONTPG.EXE
    .
    =============== Created Last 30 ================
    .
    2013-05-31 14:35:31 60872 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{90f26e0c-c45e-47dc-88a0-3e6ac9eaa0d0}\offreg.dll
    2013-05-31 14:23:49
    d-sh--w- c:\documents and settings\administrator\PrivacIE
    2013-05-31 12:48:10
    d
    w- c:\documents and settings\administrator\local settings\application data\Google
    2013-05-31 07:07:40 29904 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{90f26e0c-c45e-47dc-88a0-3e6ac9eaa0d0}\MpKsl0b507c03.sys
    2013-05-30 22:59:34 7016152 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{90f26e0c-c45e-47dc-88a0-3e6ac9eaa0d0}\mpengine.dll
    2013-05-30 22:44:35 7016152
    w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
    2013-05-30 22:42:04
    d
    w- c:\windows\system32\wbem\repository\FS
    2013-05-30 22:42:04
    d
    w- c:\windows\system32\wbem\Repository
    2013-05-30 21:49:27
    d
    w- c:\documents and settings\administrator\application data\Malwarebytes
    2013-05-10 07:57:26 187456 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
    .
    ==================== Find3M ====================
    .
    2013-05-02 15:28:50 238872
    w- c:\windows\system32\MpSigStub.exe
    2013-04-16 22:17:15 920064 ----a-w- c:\windows\system32\wininet.dll
    2013-04-16 22:17:14 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2013-04-16 22:17:14 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
    2013-04-12 23:28:55 385024 ----a-w- c:\windows\system32\html.iec
    2013-04-10 01:31:19 1876352 ----a-w- c:\windows\system32\win32k.sys
    2013-03-08 08:36:22 293376 ----a-w- c:\windows\system32\winsrv.dll
    2013-03-07 01:28:24 2193408 ----a-w- c:\windows\system32\ntoskrnl.exe
    2013-03-07 00:50:28 2070016 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2013-03-06 09:09:19 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-03-06 09:09:19 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    .
    ============= FINISH: 15:39:54.34 ===============
  • closed
    closed Posts: 10,886 Forumite
    edited 31 May 2013 at 4:52PM
    after 7 years, it would probably benefit from a backup and factory restore, assuming the disk is ok

    to check run

    chkdsk c: /F

    might run better without defender and rapport amd myway
    !!
    > . !!!! ----> .
  • badger09
    badger09 Posts: 11,577 Forumite
    Part of the Furniture 10,000 Posts Name Dropper
    closed wrote: »
    after 7 years, it would probably benefit from a backup and factory restore, assuming the disk is ok

    to check run

    chkdsk c: /F

    might run better without defender and rapport amd myway

    I think you might be right. I'll check disk is ok. only notice 'my way' in safe mode?
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351K Banking & Borrowing
  • 253.1K Reduce Debt & Boost Income
  • 453.6K Spending & Discounts
  • 244K Work, Benefits & Business
  • 598.9K Mortgages, Homes & Bills
  • 176.9K Life & Family
  • 257.3K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture