Thread: Blue Screen of Death Help!

Sorry to hear that it's getting worse before it's resolved.
The dump file should be small < 100 KB. But the windows log file could be a lot larger. I'll take a look at those and see what is there.

Was there anything that precipitated the change? Did things change after you attempted one of the repair suggestions or just spontaneously? And did you catch any of the information from the second blue screen message?









__________________________
no good deed goes unpunished

yeah the dump files are very small. the second blue screen only come on when window is booting up and its only every once in a while randomly. it show 0x0000007e.the other one show up after everything is loaded up and after i use the computer for a while. I read through the cbs log and its really long and none of it makes since to me. Hopefully you'll understand it better. Also
window fail to update error code Code FFFFFFE im starting think maybe this is a rootkit problem.

All right, I had a look at your windows log and minidump. Nothing in particular jumped out at me on a quick scan of your windows log. But the log runs more than 10,000 lines.. so I'm not going to tell you that I read every entry either. Your windows event log may have more details if you want to check there.

The memory dump was more helpful. You have to read the memory dumps with software. Well actually you don't, but if you read hex dumps over coffee.. then you really are a certifiable geek. If you really want to see what is in your dump file, you'd need to install the windows SDK debugger or something like that. But I don't think that you need to do that now. The memory dump is a snapshot of what was in your computer's memory at the time that the error occurred and gives us some clues as to what was going on.

kd>!analyze -v
Bugcheck Analysis
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8ae67b40, The address that the exception occurred at
Arg3: aeadbf6c, Trap Frame
Arg4: 00000000

Debugging Details:
OVERLAPPED_MODULE: Address regions for 'XAudio32' and 'parport.sys' overlap
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
iaStor+41b40
8ae67b40 8b4704 mov eax,dword ptr [edi+4]


Quite likely that was like so much 'Greek' to you. So what does all of that mean? Your computer locked up because two drivers tried to use the same memory location at the same time and crashed. So presumably the fault lies with 'XAudio32'. Although it could also be the parallel port driver, parport.sys or the Intel storage manager that crashed, iastor.sys. Feeding the suspects into Google tells us that Pando Media Booster includes XAudio32. So we have a likely culprit now. This may be a legit program or malware, but for the moment it doesn't much matter.

What to do? If it was my computer..
1. If you have anything that is truly important to you on this computer that isn't already backed up. Then back it up now. Before doing anything else.
2. Try to uninstall Pando Media Booster, League of legends and Ventrilo from windows safe mode. Once your computer is back to normal, you can try reinstalling them if you want to.
3. Probably not essential, but I would reinstall my chipset and graphics card drivers and ensure that you have the latest BIOS update at this time

It's possible that you may have a rootkit.. but it seems more likely that the Pando is either adware or buggy. So try the above and see where you get. If you still have the same issues after uninstalling Pando/League/Ventrilio and reinstalling your chipset + video drivers and BIOS.. we can look into rootkits and ram testing. But if the Pando mess doesn't resolve after the steps above, you're probably headed towards an 'in place' windows reinstall that JamesG and I alluded to earlier.





__________________________
no good deed goes unpunished

Yeah that a good idea I should start backing all my shit up now. Well here the bad news. The first thing i did was uninstall league of legends,ventrillo, and pando media booster(Although i didn't use something like Revo uninstaller pro. so i dont know if there would still be traces of it or not). The good news is i have not done step 3 because I dont know how to:P So if you could teach me that would be awesome .

Okay, you have the programs uninstalled but it sounds like your system files are still messed up. We're hoping that reinstalling your chipset, etc drivers will straighten that out. And if not, then a more complete 'in place' windows reinstall as JamesG (or the last suggestion on my first post) would be your best bet.

Did your computer (or motherboard) come with a driver CD? If not, then you need to determine what model your motherboard and graphics card are. Then you can go to the manufacturer's website and download a chipset driver for your motherboard and video driver for your graphics card installation programs. If you have no idea what your motherboard or graphics card are.. an utility like Belarc can usually identify them for you.





__________________________
no good deed goes unpunished

F@#$ YEAH I FIXED IT! But ummm im really not sure how. I did alot of things then suddenly realized that one of those things fixed the problems. it wasnt updating the driver Cause i just finished doing that after the problem went away( i used Driver genius professional). Also i started being bombarded with malware and trojans today while trying to fix all this. possibly all the sites i went to to figure out how to fix this.

here's some of the things i did.
*program installed it self called "security protection" Blocked all program. Restarted lots of lag so SP didn't block everything for a while so quickly started malwarebytes and removed it.
* I had a Rootkit that redirected all alot of my searches on google so i download a tdsskiller
*all the programs I was downloading and trying to use to fix this problem where not working cause they said they failed or said they couldn't connect. It turn out IE was ticked to use a proxy and all these programs used that to connect/install.
*then I downloaded Hitman pro and it found a bunch of tracker cookies on Firefox,trojans and rootkits.
*I might've done some other thing but i really dont remember.

Sorry that i don't have a solid answer to how to fix this problem. It could have been anything that fixed it (possible even the "security protection malware changing something in a positive way). But i would like to thank everyone for the help and support. You guys at T-I always help me with everything i could possible need. You all are awesome.

P.S. I heard after something like this happening, that you are left with alot of vulnerabilities in your computer. So someone said recommended somewhere to clean your registry. Anyone know of any good programs for that?

Well, if your computer is now stable, that's great to hear.

You were playing with a lot of variables and apparently downloaded something that installed a rootkit too.. so it's hard to say exactly what worked. But glad to hear that it's back to normal. Vis a vis the rootkit thing, I'd highly recommend that you run multiple spyware scans on your computer to gain some margin of comfort that it is "clean" (secure). I'd suggest running a good anti-virus scan plus two passes with Malwarebytes and two passes with Spybot.

That may sound like a lot of work.. but just think of the mess if someone hijacked your online banking info or something like that. Speaking only for myself, I would never completely trust a computer that had been rooted and would format /re-image my drive as well as change all of my passwords. But my paranoia level is higher than average.. most people would just run a few spyware scans and call it a day. There are a lot of registry cleaner programs e.g. PC Tools Registry Mechanic. But as far as that goes, I'd trust Malwarebytes to clean that up. Especially if you already ran TDSS killer.





__________________________
no good deed goes unpunished