[rondragon]

Ok,

I whittled out a few HJT entries that I thought seemed irrelevant. Restarted to get another BSOD!!!!!!!

DRIVER_IRQL_NOT_LESS_OR_EQUAL

Stop error code: 0x000000D1

---------------------------------------------

Problem persists..........ARG! etc



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:08:43, on 23/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll (file missing)
O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO. EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID. EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

--
End of file - 3295 bytes

[evilfantasy]

Download Malwarebytes' Anti-Malware (MBAM)

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to the following:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
• Then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy and Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

[rondragon]

Last 2 crashes do not seem to leave a minidump???

[rondragon]

Malwarebytes' installed and run but nothing found (log file below). Googled the stop error code 0x000000D1 and some mention corrupt pagefile / dodgy RAM so I have set 'no page file' on all drives, restarted and just now reset the pagefile. I will restart and see how I get on....

Malwarebytes' Anti-Malware 1.34
Database version: 1889
Windows 5.1.2600 Service Pack 3

23/03/2009 19:38:16
mbam-log-2009-03-23 (19-38-16).txt

Scan type: Quick Scan
Objects scanned: 63572
Time elapsed: 3 minute(s), 51 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[philthomas]

As you seem to be getting spurious results and different error messages, I was beginning to think it may be a Ram issue.

If you have more than one stick of Ram, try removing one and swapping them, running with just 1 and see if there is any improvement or whether you can identify a bad stick.

[rondragon]

Yes, I'm thinking along those lines myself.

I upgraded the PC a while ago which is when the dreaded BSODs started. One of the upgrades was the RAM and I still have the original 1/2 G stick, so I can easily check to see if the RAM is causing the problem.

I've restarted the PC a few times this evening without crashing so I'll see how I get on. If the Blue Screens come back then I'll start swapping the RAM. If that doesn't work then I'll be back for more advice!

Just to confirm, BSODs do NOT occur in Safe Mode and I'm unable to repair Windows using the CD as it reports corrupted files (various) when trying to boot from the CD.

Thanks for the continued support.

[philthomas]

Goos Luck with it ......keep us posted on how you get on

[rondragon]

Ok,

Tried the 1/2G stick in a previously unused slot 3 and STILL BSOD!!!! I've returned the 2 1G sticks back into the slots 1 & 2 to see how I get on. At first glance it seems that the RAM is not an issue. The other thing I'm thinking about is updating the BIOS - could this be the cause??

As I've said before, BSOD only occurs at start up and it's not every time. Over the last few months I've had most of the STOP error codes!!

[philthomas]

It wont do any harm to update the bios, but I somehow think this wont help.

The fact that it doesn't BSOD in Safe Mode, does suggest corrupted Windows files/drivers or registry.

In view of the time you have spent on this already, it might be worth biting the bullet, backing up your data and doing a clean install, including a format.

Before you do that though, can you elaborate a bit more, when you said :

" I'm unable to repair Windows using the CD as it reports corrupted files (various) when trying to boot from the CD."

Did you try a "Repair Install" .... i.e. installing over the top of your existing XP, or do you mean you couldn't get into "Recovery Console"

Tell more on the "corrupted files .... was this reporting corrupted files on the CD or ?

[rondragon]

I've booted from the Windows CD but this time all the files have loaded successfully and I get to a page where it lists the different partitions and asks me where I would like to install windows. There is no option to repair Windows??!! However, when I've tried this before, an error message would occur when the setup files were being loaded saying that some such file was corrupt and I couldn't get any further. I tried this several times getting a different corrupt file each time. But I didn't get an error message this time so at least there is some improvement!!!

How do I repair WIndows using the CD I've got??