All,

I did verifer and chkdsk /r which ran for about 2 hours on my 250gb HDD

reinstalled the latest version of spysweeper.

Will see how it goes.

Dom

in meantime I will check out the malware

"Gerry" wrote:

Dominic

What Warning and Error Reports appear in Event Viewer since it's
removal? Can you please post copies.

If you have had a malware infestation one holds the door open to let
it's friends in.

Can you please post a copy of the latest Stop error report.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Dominiccoombe wrote:
Gerry,

SSFS0BB8.SYS - does not exist on the machine after the uninstall of
webroot.


I will follow your spyware suggestions after I do the verifier and
chkdsk /r

Dominic

"Gerry" wrote:

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's
properties by right clicking on the file. Instructions on how to
Show hidden files are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings
and verify that the box before "Show hidden files and folders" is
checked and "Hide protected operating system files " is unchecked.
You may need to scroll down to see the second item. You should also
make certain that the box before "Hide extensions for known file
types" is not checked. Next in Windows Explorer make sure View,
Details is selected and then select View, Choose Details and check
before Name, Type, Total Size, and Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/...moving_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are
able to undertake. Given your question I doubt you will be able to
deduce their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot.
No Information Reports or Duplicates please. Indicate which also
appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the
meaning of the error, information regarding Event ID, Source and
Description are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited
or stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click
on the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you
have resolved the problem. Check for variants of the Stop Error
message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out
as a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic