A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Windows XP Help and Support
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Blue screen crashes



 
 
Thread Tools Display Modes
  #1  
Old December 18th 07, 11:23 AM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

hi all,

my xp pro machine has progresses from crashing nearly every program and
having the odd unexplained reboot to now having blue screen crashes.

I look at the blue screen but there is nothing that stands out as a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic
Ads
  #2  
Old December 18th 07, 01:28 PM posted to microsoft.public.windowsxp.help_and_support
Gerry
external usenet poster
 
Posts: 9,437
Default Blue screen crashes

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and select
option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every program
and having the odd unexplained reboot to now having blue screen
crashes.

I look at the blue screen but there is nothing that stands out as a
problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic



  #3  
Old December 18th 07, 03:28 PM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will make an
extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and select
option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every program
and having the odd unexplained reboot to now having blue screen
crashes.

I look at the blue screen but there is nothing that stands out as a
problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic




  #4  
Old December 18th 07, 06:57 PM posted to microsoft.public.windowsxp.help_and_support
Gerry
external usenet poster
 
Posts: 9,437
Default Blue screen crashes

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able to
undertake. Given your question I doubt you will be able to deduce their
meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every program
and having the odd unexplained reboot to now having blue screen
crashes.

I look at the blue screen but there is nothing that stands out as a
problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic



  #5  
Old December 18th 07, 07:22 PM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007a
(0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump was saved in:
C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able to
undertake. Given your question I doubt you will be able to deduce their
meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every program
and having the odd unexplained reboot to now having blue screen
crashes.

I look at the blue screen but there is nothing that stands out as a
problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic




  #6  
Old December 18th 07, 07:47 PM posted to microsoft.public.windowsxp.help_and_support
nass
external usenet poster
 
Posts: 7,474
Default Blue screen crashes


Hi,
Please read all the info then execute:
This error indicate that a piece of Data is being tried to be accessed from
a bad Sector or the opposite a piece of data tried to be written to a bad
Sectors on a Hard rive or a RAM.
So first check your Hard drive and all the drivers are verified.

Any hardware/software or updates installed recently?, please state all if
any in your next post.
You can use this driver verifier command:
verifier.exe click [OK]
First try to eliminate hardware, by going to Device manager and check by
expanding the Plus [+] to see all devices listed, if there is a
malfunctioning device or conflicting device it will show in Device manager.

This always refer to a bad Hardware/driver installed.
Try the Last good known Configuration to log into the system, then open
Device manager and see if there is any malfunctioining Devices or conflict in
IRQ, also look in the Event Viewer for error message and post them back in
your next post.
Read this articles and see, but how did you get rid of the Contra?.

Open a run command and type in these commands to see if there is a conflict
in /among drivers :
pstat.exe click [OK]
dmpchck.exe click [OK]
What you get from running this commands?.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

Try to use the Verifier.exe command to see which Drivers not Verified on
your system:
How to Use Driver Verifier to Troubleshoot Windows Drivers
http://support.microsoft.com/kb/244617/en-us

You may have a bad RAM try to test your RAM by running Memtest by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://www.memtest86.com/
You may need to reposition/reset the RAM sticks in their slots.
After that you could do a repair install, and then test.
http://www.michaelstevenstech.com/XPrepairinstall.htm

Use the command chkdsk /r with recovery console:
http://support.microsoft.com/kb/314058
http://support.microsoft.com/kb/326215

Error Message "Stop 0x0000007A" KERNEL_DATA_INPAGE_ERROR
http://support.microsoft.com/kb/275149
Stop 0x0000007A or KERNEL_DATA_INPAGE_ERROR
http://www.microsoft.com/technet/pro....mspx?mfr=true


Common Causes of STOP Messages 0x00000077 and 0x0000007A
http://support.microsoft.com/kb/130801

More solutions for 0x0000007A
http://search.microsoft.com/results....S&q=0x0000007A

This can Indicate a BHO is corrupted or damaged and causing the Shell error,
so try to Disable the Un-verified Add-Ons on your Browser and see if that
will help.

*Click Start Control Panel Double click Network and Internet
Connections Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

== SSFS0BB8.SYS is for webroot, do you have webroot installed?, if you do
try to uninstalll it and then run Disk clean up and reinstall it again, does
it help?.

HTH.
nass
-----
http://www.nasstec.co.uk

"Dominiccoombe" wrote:

Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007a
(0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump was saved in:
C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able to
undertake. Given your question I doubt you will be able to deduce their
meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every program
and having the odd unexplained reboot to now having blue screen
crashes.

I look at the blue screen but there is nothing that stands out as a
problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic




  #7  
Old December 18th 07, 08:16 PM posted to microsoft.public.windowsxp.help_and_support
Gerry
external usenet poster
 
Posts: 9,437
Default Blue screen crashes

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's properties
by right clicking on the file. Instructions on how to Show hidden files
are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings and
verify that the box before "Show hidden files and folders" is checked
and "Hide protected operating system files " is unchecked. You may need
to scroll down to see the second item. You should also make certain that
the box before "Hide extensions for known file types" is not checked.
Next in Windows Explorer make sure View, Details is selected and then
select View, Choose Details and check before Name, Type, Total Size, and
Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/...moving_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able
to undertake. Given your question I doubt you will be able to deduce
their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear
in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after exiting
from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out as
a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic



  #8  
Old December 18th 07, 09:07 PM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

Yes I do have webroot installed.

I will work my way through all the suggestions.

Dominic

"nass" wrote:


Hi,
Please read all the info then execute:
This error indicate that a piece of Data is being tried to be accessed from
a bad Sector or the opposite a piece of data tried to be written to a bad
Sectors on a Hard rive or a RAM.
So first check your Hard drive and all the drivers are verified.

Any hardware/software or updates installed recently?, please state all if
any in your next post.
You can use this driver verifier command:
verifier.exe click [OK]
First try to eliminate hardware, by going to Device manager and check by
expanding the Plus [+] to see all devices listed, if there is a
malfunctioning device or conflicting device it will show in Device manager.

This always refer to a bad Hardware/driver installed.
Try the Last good known Configuration to log into the system, then open
Device manager and see if there is any malfunctioining Devices or conflict in
IRQ, also look in the Event Viewer for error message and post them back in
your next post.
Read this articles and see, but how did you get rid of the Contra?.

Open a run command and type in these commands to see if there is a conflict
in /among drivers :
pstat.exe click [OK]
dmpchck.exe click [OK]
What you get from running this commands?.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

Try to use the Verifier.exe command to see which Drivers not Verified on
your system:
How to Use Driver Verifier to Troubleshoot Windows Drivers
http://support.microsoft.com/kb/244617/en-us

You may have a bad RAM try to test your RAM by running Memtest by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://www.memtest86.com/
You may need to reposition/reset the RAM sticks in their slots.
After that you could do a repair install, and then test.
http://www.michaelstevenstech.com/XPrepairinstall.htm

Use the command chkdsk /r with recovery console:
http://support.microsoft.com/kb/314058
http://support.microsoft.com/kb/326215

Error Message "Stop 0x0000007A" KERNEL_DATA_INPAGE_ERROR
http://support.microsoft.com/kb/275149
Stop 0x0000007A or KERNEL_DATA_INPAGE_ERROR
http://www.microsoft.com/technet/pro....mspx?mfr=true


Common Causes of STOP Messages 0x00000077 and 0x0000007A
http://support.microsoft.com/kb/130801

More solutions for 0x0000007A
http://search.microsoft.com/results....S&q=0x0000007A

This can Indicate a BHO is corrupted or damaged and causing the Shell error,
so try to Disable the Un-verified Add-Ons on your Browser and see if that
will help.

*Click Start Control Panel Double click Network and Internet
Connections Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

== SSFS0BB8.SYS is for webroot, do you have webroot installed?, if you do
try to uninstalll it and then run Disk clean up and reinstall it again, does
it help?.

HTH.
nass
-----
http://www.nasstec.co.uk

"Dominiccoombe" wrote:

Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007a
(0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump was saved in:
C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able to
undertake. Given your question I doubt you will be able to deduce their
meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every program
and having the odd unexplained reboot to now having blue screen
crashes.

I look at the blue screen but there is nothing that stands out as a
problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic



  #9  
Old December 18th 07, 09:50 PM posted to microsoft.public.windowsxp.help_and_support
nass
external usenet poster
 
Posts: 7,474
Default Blue screen crashes



"Dominiccoombe" wrote:

Yes I do have webroot installed.

I will work my way through all the suggestions.

Dominic


Hi Dominic,
If you will go a head, try the easiest first, which:
Use the Verifier command then the Chkdsk /r command and Reboot your system,
monitor the activities, any good?.

Test the RAM with memtest, then uninstall the webroot and run disk clean up
and reinstall webroot after that and update its definitions.
If you still can you please tell us what your Anti-virus arrangements and
anti-malware, how many security programs are you running and are they
up2dates and current?.

  #10  
Old December 19th 07, 11:24 AM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

Morning,

I ran memtest+ all night and no crash or errors reported.

I skipped a few stages this morning and tried to uninstall webroot, and as
soon as I did the machine blue screened. I am now going to have to make sure
the uninstall finished then will do verifier and the chkdsk /r

I run avast home edition free anti virus. Other than that I run webroot
spyware and cloudmark anti spam. All recent updates are applied to these
programs

"nass" wrote:



"Dominiccoombe" wrote:

Yes I do have webroot installed.

I will work my way through all the suggestions.

Dominic


Hi Dominic,
If you will go a head, try the easiest first, which:
Use the Verifier command then the Chkdsk /r command and Reboot your system,
monitor the activities, any good?.

Test the RAM with memtest, then uninstall the webroot and run disk clean up
and reinstall webroot after that and update its definitions.
If you still can you please tell us what your Anti-virus arrangements and
anti-malware, how many security programs are you running and are they
up2dates and current?.

  #11  
Old December 19th 07, 11:34 AM posted to microsoft.public.windowsxp.help_and_support
Gerry
external usenet poster
 
Posts: 9,437
Default Blue screen crashes

Dominic

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's properties
by right clicking on the file. Instructions on how to Show hidden files
are in the next paragraph. What does it tell you?

Go to Start, Control Panel, Folder Options, View, Advanced Settings and
verify that the box before "Show hidden files and folders" is checked
and "Hide protected operating system files " is unchecked. You may need
to scroll down to see the second item. You should also make certain that
the box before "Hide extensions for known file types" is not checked.
Next in Windows Explorer make sure View, Details is selected and then
select View, Choose Details and check before Name, Type, Total Size, and
Free Space.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Dominiccoombe wrote:
Morning,

I ran memtest+ all night and no crash or errors reported.

I skipped a few stages this morning and tried to uninstall webroot,
and as soon as I did the machine blue screened. I am now going to
have to make sure the uninstall finished then will do verifier and
the chkdsk /r

I run avast home edition free anti virus. Other than that I run
webroot spyware and cloudmark anti spam. All recent updates are
applied to these programs

"nass" wrote:



"Dominiccoombe" wrote:

Yes I do have webroot installed.

I will work my way through all the suggestions.

Dominic


Hi Dominic,
If you will go a head, try the easiest first, which:
Use the Verifier command then the Chkdsk /r command and Reboot your
system, monitor the activities, any good?.

Test the RAM with memtest, then uninstall the webroot and run disk
clean up and reinstall webroot after that and update its definitions.
If you still can you please tell us what your Anti-virus
arrangements and anti-malware, how many security programs are you
running and are they up2dates and current?.



  #12  
Old December 19th 07, 11:42 AM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

Gerry,

SSFS0BB8.SYS - does not exist on the machine after the uninstall of webroot.


I will follow your spyware suggestions after I do the verifier and chkdsk /r

Dominic

"Gerry" wrote:

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's properties
by right clicking on the file. Instructions on how to Show hidden files
are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings and
verify that the box before "Show hidden files and folders" is checked
and "Hide protected operating system files " is unchecked. You may need
to scroll down to see the second item. You should also make certain that
the box before "Hide extensions for known file types" is not checked.
Next in Windows Explorer make sure View, Details is selected and then
select View, Choose Details and check before Name, Type, Total Size, and
Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/...moving_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able
to undertake. Given your question I doubt you will be able to deduce
their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear
in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after exiting
from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out as
a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic




  #13  
Old December 19th 07, 01:55 PM posted to microsoft.public.windowsxp.help_and_support
Gerry
external usenet poster
 
Posts: 9,437
Default Blue screen crashes

Dominic

What Warning and Error Reports appear in Event Viewer since it's
removal? Can you please post copies.

If you have had a malware infestation one holds the door open to let
it's friends in.

Can you please post a copy of the latest Stop error report.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Dominiccoombe wrote:
Gerry,

SSFS0BB8.SYS - does not exist on the machine after the uninstall of
webroot.


I will follow your spyware suggestions after I do the verifier and
chkdsk /r

Dominic

"Gerry" wrote:

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's
properties by right clicking on the file. Instructions on how to
Show hidden files are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings
and verify that the box before "Show hidden files and folders" is
checked and "Hide protected operating system files " is unchecked.
You may need to scroll down to see the second item. You should also
make certain that the box before "Hide extensions for known file
types" is not checked. Next in Windows Explorer make sure View,
Details is selected and then select View, Choose Details and check
before Name, Type, Total Size, and Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/...moving_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are
able to undertake. Given your question I doubt you will be able to
deduce their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot.
No Information Reports or Duplicates please. Indicate which also
appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the
meaning of the error, information regarding Event ID, Source and
Description are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited
or stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click
on the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you
have resolved the problem. Check for variants of the Stop Error
message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out
as a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic



  #14  
Old December 19th 07, 02:29 PM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

All,

I did verifer and chkdsk /r which ran for about 2 hours on my 250gb HDD

reinstalled the latest version of spysweeper.

Will see how it goes.

Dom

in meantime I will check out the malware

"Gerry" wrote:

Dominic

What Warning and Error Reports appear in Event Viewer since it's
removal? Can you please post copies.

If you have had a malware infestation one holds the door open to let
it's friends in.

Can you please post a copy of the latest Stop error report.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Dominiccoombe wrote:
Gerry,

SSFS0BB8.SYS - does not exist on the machine after the uninstall of
webroot.


I will follow your spyware suggestions after I do the verifier and
chkdsk /r

Dominic

"Gerry" wrote:

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's
properties by right clicking on the file. Instructions on how to
Show hidden files are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings
and verify that the box before "Show hidden files and folders" is
checked and "Hide protected operating system files " is unchecked.
You may need to scroll down to see the second item. You should also
make certain that the box before "Hide extensions for known file
types" is not checked. Next in Windows Explorer make sure View,
Details is selected and then select View, Choose Details and check
before Name, Type, Total Size, and Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/...moving_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are
able to undertake. Given your question I doubt you will be able to
deduce their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot.
No Information Reports or Duplicates please. Indicate which also
appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the
meaning of the error, information regarding Event ID, Source and
Description are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited
or stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click
on the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you
have resolved the problem. Check for variants of the Stop Error
message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out
as a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic




  #15  
Old December 20th 07, 11:43 AM posted to microsoft.public.windowsxp.help_and_support
Dominiccoombe
external usenet poster
 
Posts: 27
Default Blue screen crashes

24 hours and no blue screen.

Still need to check for malware.

Dominic

"Dominiccoombe" wrote:

All,

I did verifer and chkdsk /r which ran for about 2 hours on my 250gb HDD

reinstalled the latest version of spysweeper.

Will see how it goes.

Dom

in meantime I will check out the malware

"Gerry" wrote:

Dominic

What Warning and Error Reports appear in Event Viewer since it's
removal? Can you please post copies.

If you have had a malware infestation one holds the door open to let
it's friends in.

Can you please post a copy of the latest Stop error report.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Dominiccoombe wrote:
Gerry,

SSFS0BB8.SYS - does not exist on the machine after the uninstall of
webroot.


I will follow your spyware suggestions after I do the verifier and
chkdsk /r

Dominic

"Gerry" wrote:

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's
properties by right clicking on the file. Instructions on how to
Show hidden files are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings
and verify that the box before "Show hidden files and folders" is
checked and "Hide protected operating system files " is unchecked.
You may need to scroll down to see the second item. You should also
make certain that the box before "Hide extensions for known file
types" is not checked. Next in Windows Explorer make sure View,
Details is selected and then select View, Choose Details and check
before Name, Type, Total Size, and Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/...moving_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are
able to undertake. Given your question I doubt you will be able to
deduce their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot.
No Information Reports or Duplicates please. Indicate which also
appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the
meaning of the error, information regarding Event ID, Source and
Description are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close Event Viewer.Now start your message (email) and do a paste
into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited
or stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click
on the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you
have resolved the problem. Check for variants of the Stop Error
message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out
as a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic




 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 12:27 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.