This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

No applications running / 1.5 hrs to boot

33 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Good morning Juliet,

 

Jeepers, you are up early.  I was, too.  But I didn't log in cause I didn't expect that you would be on that early.  :D

 

Re: "Looks good, remove quite a bit of stuff.  Hope your seeing improvements?"

 

:notworthy:   As I mentioned right at the 2nd post, right now is like light speed

Improvements:

  • Booting went from 1.5 hrs, to 3 minutes
  • C drive partition space went from less that 1G to 42G

 

Continued challenges:

  1. This morning trying to run Windows Movie Maker hard crashed 6X (2X during rebbot :( ).  One of those crashes / reboot produced this when I attempted to run WMM: 📎WNN.PNG  
    This was corrected when the machine automatically ran CHKDISK.  The poor machine just doesn't like video
  2. Continued mouse freeze-up (Driver probs?)
  3. Attempting to System Restore to a previous time, does not work!  After attempting to restore & machine reboots, message reads something like this:  "Your machine was not able to be restored to XX/XX/XX date/time"

 

Re: "Download Malwarebytes' Anti-Malware to your desktop."

Oh No!  đź“ŽMalwarebytes.PNG   :(   Looks like my machine recognizes previous use.  . . . .

 

Hold that.  I have just discovered that Malwarebyes has run.  I am currently performing the processes.  Will post results . . .

 

I have just discovered that Malwarebyes has run.  I am currently performing the processes.  Will post results .

After we see whats found we can try to troubleshoot the other issues.

Hello Juliet,

 

 

Re: "After we see whats found we can try to troubleshoot the other issues."

Thank you for seeing "Continued challenges:" section in my post previous to this one: Three items for question.

And Thank you for your assistance to this point!   :clap:

 

Just FYI: No Log file appeared.  Instead, here is the result 

📎MalwareBytes Copy.JPG

 

Further Challenges:  The "Microsoft Updates" run every time I shut down (16 of them).  Yet, they fail to be completed & run again (all 16 updates) on next shutdown, with EVERY shutdown. (Sort of like Groundhog day)

 

 

—————————————————————————————-———-———-———-———-

Malwarebytes Log

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 1/31/2015
Scan Time: 8:28:13 AM
Logfile: 
Administrator: Yes
 
Version: 2.00.4.1028
Malware Database: v2015.01.31.03
Rootkit Database: v2015.01.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: pete
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 304850
Time Elapsed: 19 min, 25 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 1
PUP.Optional.Vosteran, HKLM\SOFTWARE\CLASSES\APPID\{4CB3598A-82E8-4D1F-983F-061238AE696E}, , [45aab24bec9d5cda54ecde1744bee020], 
 
Registry Values: 1
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files\WSE_Vosteran\\, , [bf3023da8bfedd59300d8e7acc393fc1]
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 1
PUP.Optional.InstallCore, C:\Documents and Settings\pete\Application Data\0A1Q1J1G1F2W1I1P1Q1N1P0P2Y1S\7zip Packages\uninstaller.exe, , [7b74d32a5b2e1026fcc51efc26dc718f], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)
I can't see from the log but you allowed it to quarantine what it found?

Other then that, does the computer preform well?

What we can do now is run an online scan with Eset, for the time being it is our most trusted scanner.
Most reliable and thorough.
The settings I suggest will show us items located in quarantine folders so don't be alarmed with this, also, in case of a false positive I ask that you not allow it to delete what it does find.
This scanner can take quite a bit of time to run, depending of course how full your computer is.


Go here to run an online scannner from ESET. Windows Vista/Windows 7/Windows 8 users will need to right click on their Internet Explorer shortcut, and select Run as Administrator
  • Note:
    For browsers other than Internet Explorer, you will be prompted to download and install esetsmartinstaller_enu.exe. Click on the link and save the file to a convenient location. Double click on it to install and a new window will open. Follow the prompts.
  • Turn off the real time scanner of any existing antivirus program while performing the online scan. Here's how.
  • Click the blue Run ESET Online Scanner button
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the program to install the "OnlineScanner.cab" activex control by clicking the Install button
  • Once the activex control is installed, on the next screen click on Enable detection of potentially unwanted applications
  • Click on Advanced Settings
  • Make sure that the option Remove found threats is unticked.
  • Ensure these options are ticked
    • Scan archives
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • Click Start
  • Wait for the scan to finish
  • When the scan is done, if it shows a screen that says "Threats found!", then click "List of found threats", and then click "Export to text file…"
  • Save that text file on your desktop. Copy and paste the contents of that log as a reply to this topic.
  • Close the ESET online scan.
*************************************






Also please download Windows Repair (all in one) from here

[external image: step-4-tab.jpg]
Install the program then go to step 4 and create a new system restore point and new registry backup.

Go to Step 2 and allow it to run CheckDisk by clicking on Do It button:
[external image: p22001645.gif]



NEXT
On the the Start Repairs tab => Click the Start
[external image: start-repairs-tab.jpg]


Please ensure that ONLY items seen in the image below are ticked as indicated (they're all checked by default):
[external image: p22001647.gif]

Click on box next to the Restart System when Finished. Then click on Start.

Hello Juliet,

 

Each of those (ESET Online Scanner & tweaking.com) were a LONG processes.  wow  :wacko:   :)

 

Notes:

  1. We can never escape the wrath of the hard crash.  [20? 30? I lost count]  It appears that this machine still has difficulty with running vids (youtube, WMM, etc)
  2. Prior to running "tweaking.com", each hard crash was accompanied with yet another crash during reboot, EVERY time w/o fail! :thumbdown:   Hopefully tweaking.com has eliminated that.  So far, with the one hard crash, no added crash during reboot.
  3. Mouse freeze (freeze & go, freeze & go, dead - unplug mouse - Plug it back in) continues to be an issue
  4. During ESET Scan, even though I had temporarily disabled AVG till restart, ESET continued to recognize AVG.
    📎ESET Scanner - AVG.JPG
    [Not sure if it simply "saw AVG" or actually operated on it)
  5. AVG has problems now.  When I open AVG, it shows that I need to restart.
    📎AVG repeat.JPG

    Upon reboot, I continue to be presented with that.
    📎AVG Web not protected.JPG

    "Fix now" appears not to fix the problem
    i.e. AVG is NO LONGER protecting my machine  :wall:

Info Note:

 

Addendum> 3 crashes since this post, all with no "crash on reboot"

 

—————————————————————————————-———-———-———-———-

ESET Scan.txt

 

E:\My Documents\Downloads\mp3rocket (1).exe a variant of Win32/InstallCore.UR potentially unwanted application
E:\My Documents\Downloads\mp3rocket.exe a variant of Win32/InstallCore.WE potentially unwanted application
E:\My Documents\Downloads\Setup.exe a variant of Win32/InstallCore.UF potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir Win32/Toolbar.Conduit.Y potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files\File Type Helper\FileTypeHelper.exe.vir MSIL/FileTypeHelper.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files\File Type Helper\FileTypeHelper_assoc.exe.vir MSIL/FileTypeHelper.A potentially unwanted application deleted - quarantined
C:\Documents and Settings\pete\Application Data\0A1Q1J1G1F2W1I1P1Q1N1P0P2Y1S\7zip Packages\uninstaller.exe Win32/InstallCore.PC potentially unwanted application deleted - quarantined
C:\Documents and Settings\pete\Desktop\backups\backup-20150130-105452-502.dll a variant of Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429487.exe Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429488.dll a variant of Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429489.dll a variant of Win64/Toolbar.Widgi.D potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429490.exe Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429491.exe Win64/Toolbar.Widgi.D potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429492.dll Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1026\A0429493.dll Win64/Toolbar.Widgi.D potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1031\A0433591.dll a variant of Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1036\A0437965.exe Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1036\A0437967.dll Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1036\A0437970.exe Win32/Toolbar.Widgi.H potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1038\A0441097.dll Win32/Toolbar.Conduit.Y potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1038\A0441099.exe MSIL/FileTypeHelper.A potentially unwanted application deleted - quarantined
C:\System Volume Information\_restore{75F719D9-0093-4176-AD16-87345C19DA35}\RP1038\A0441100.exe MSIL/FileTypeHelper.A potentially unwanted application deleted - quarantined
E:\My Documents\Downloads\mp3rocket v7.1.exe a variant of Win32/InstallCore.SW potentially unwanted application deleted - quarantined
E:\My Documents\Downloads\Unconfirmed 530744.crdownload a variant of Win32/InstallCore.WE potentially unwanted application deleted - quarantined
E:\_OTL\MovedFiles\06182013_172033\C_Program Files\Mozilla Firefox\components\sprotector.js Win32/Conduit.SearchProtect.A potentially unwanted application deleted - quarantined
E:\_OTL\MovedFiles\06182013_172033\E_My Documents\Downloads\cbsidlm-cbsi5_3_0_96-FVD_Suite-ORG-10870878.exe a variant of Win32/CNETInstaller.B potentially unwanted application deleted - quarantined
E:\_OTL\MovedFiles\06182013_172033\E_My Documents\Downloads\cbsidlm-tr1_10a-YouTube_FLV_to_AVI_Suite_Enterprise-SEO-10663362.exe Win32/DownloadAdmin.G potentially unwanted application deleted - quarantined
E:\_OTL\MovedFiles\06182013_172033\E_My Documents\Downloads\setup.exe Win32/InstallMonetizer.AF potentially unwanted application deleted - quarantined
E:\_OTL\MovedFiles\06182013_172033\E_My Documents\Downloads\Utilities\FreeVideoToMP3Converter V3.5.8 [5.0.21.1201].exe Win32/Toolbar.Conduit potentially unwanted application deleted - quarantined
E:\_OTL\MovedFiles\06182013_172033\E_My Documents\Downloads\Utilities\FrostWire.exe Win32/DomaIQ.L potentially unwanted application deleted - quarantined
I see you didn't allow it to remove
E:\My Documents\Downloads\mp3rocket (1).exe a variant of Win32/InstallCore.UR potentially unwanted application
E:\My Documents\Downloads\mp3rocket.exe a variant of Win32/InstallCore.WE potentially unwanted application
E:\My Documents\Downloads\Setup.exe a variant of Win32/InstallCore.UF potentially unwanted application
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
If you decide these files need to go since they were found

delete files
  • Copy all text in the code box (below)…to Notepad.
    @echo off
    del /f /s /q "E:\My Documents\Downloads\mp3rocket (1).exe" 
    del /f /s /q "E:\My Documents\Downloads\mp3rocket.exe" 
    del /f /s /q "E:\My Documents\Downloads\Setup.exe" 
    del %0
  • Save the Notepad file on your desktop…as delfile.bat… save type as "All Files"
    It should look like this: 🖼Click to load external image (batfileicon.gif)<–XP[external image: vista_bat_icon.png]<–vista
  • Double click on delfile.bat to execute it.
    A black CMD window will flash, then disappear…this is normal.
  • The files and folders, if found…will have been deleted and the "delfile.bat" file will also be deleted.
~~~~~~~~~~~~~~~~~~~~~`
Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Anyways. I don't know why AVG is acting up like it is but a thought, uninstall reinstall or
You don't have to do this of course just a suggestion
  • [external image: 8fj6i2U.png.pagespeed.ce.RUYs43FaJ5.png]avast! Free Anti-Virus (free)
  • [external image: 8fj6i2U.png.pagespeed.ce.RUYs43FaJ5.png]Avira AntiVir Personal - Free Antivirus
  • [external image: xUbJpW95.png.pagespeed.ic.Eg8QK7Uzqf.jpg] Microsoft Security Essentials (free)
  • [external image: GzlsbnV.png.pagespeed.ce.SLxxSJVib_.png] ESET NOD32 Anti-Virus (paid)
  • [external image: YARWD1t.png.pagespeed.ce.nvhmVeYDe3.png] Kaspersky Anti-Virus (paid)
  • [external image: x7D2ig3K.png.pagespeed.ic.x4TC1AK8OX.jpg]Emsisoft Internet Security (paid)
~~~

Hello Juliet,

 

Re: "I see you didn't allow it to remove"  I found that the current version of ESET Online Scanner did not present as the instructions which were provided.  I never found that option (to remove) on ESET Online Scanner.  Believing that I had missed that option, I retreated to start over.  I found nothing new on the restart.  i.e. I had not missed that option

 

Re: "If you decide these files need to go since they were found"  Done

 

Crashes: As I look at these crash files, NONE of them are recent (i.e. the 20-30 crashes today & up to 10 daily previously).  To give more info, these crashes are completely DOA!  The machine is instantly and immediately shut down OFF!

The number of crashes to this point, have reduced significantly!

 

AVG: Pressed "Fix Now" again.  Immediately fixed.  Seems to be no longer behaving as badly.  Curiously, if I click on the thumbnail in the sys tray, here is what I am presented with.  That is, it appears to be protecting, yet it requests an update.  Yet, when I recycle, I am again presented with the same.  i.e. "Computer restart required"
📎AVG protected.JPG

 

Repeated Updates:  16 repeated Updates on every shutdown as previously reported as being "like Groundhog Day", are now gone.  Machine shuts down as it should.   :clap:

 

Mouse:  Continues to> freeze & go, freeze & go, dead. - unplug & re-plug in.

 

—————————————————————————————-———-———-———-———-

BSOD.txt

==================================================
Dump File         : Mini121214-01.dmp
Crash Time        : 12/12/2014 10:34:17 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc9e
Parameter 3       : 0xa34dcae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc9e
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc9e
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini121214-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 12/12/2014 12:56:18 PM
==================================================
 
==================================================
Dump File         : Mini120614-01.dmp
Crash Time        : 12/6/2014 8:06:15 AM
Bug Check String  : BAD_POOL_CALLER
Bug Check Code    : 0x000000c2
Parameter 1       : 0x00000007
Parameter 2       : 0x00000cd4
Parameter 3       : 0x01010100
Parameter 4       : 0x8950f468
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+22fa3
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6419 (xpsp_sp3_qfe.130704-0421)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : ntoskrnl.exe+acb7c
Stack Address 3   : ntoskrnl.exe+e44de
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini120614-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 12/6/2014 8:06:29 AM
==================================================
 
==================================================
Dump File         : Mini111914-01.dmp
Crash Time        : 11/19/2014 5:46:45 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc9e
Parameter 3       : 0xa2b6bae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc9e
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc9e
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini111914-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 11/19/2014 5:48:07 PM
==================================================
 
==================================================
Dump File         : Mini090814-01.dmp
Crash Time        : 9/8/2014 1:05:43 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc9e
Parameter 3       : 0xa4494ae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc9e
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc9e
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini090814-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 9/8/2014 1:07:05 AM
==================================================
 
==================================================
Dump File         : Mini071814-01.dmp
Crash Time        : 7/18/2014 3:31:16 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc93
Parameter 3       : 0xa430bae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc93
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc93
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini071814-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 7/18/2014 3:32:37 PM
==================================================
 
==================================================
Dump File         : Mini060814-01.dmp
Crash Time        : 6/8/2014 11:37:58 AM
Bug Check String  : BAD_POOL_CALLER
Bug Check Code    : 0x000000c2
Parameter 1       : 0x00000007
Parameter 2       : 0x00000cd4
Parameter 3       : 0x04220801
Parameter 4       : 0xe242e968
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+2ae5
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : ntoskrnl.exe+22fa3
Stack Address 1   : ntoskrnl.exe+74583
Stack Address 2   : win32k.sys+2ae5
Stack Address 3   : win32k.sys+4ddad
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini060814-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 6/8/2014 11:39:26 AM
==================================================
 
==================================================
Dump File         : Mini052814-01.dmp
Crash Time        : 5/28/2014 3:23:40 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc9e
Parameter 3       : 0xa49d1ae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc9e
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc9e
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini052814-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 5/28/2014 3:25:08 PM
==================================================
 
==================================================
Dump File         : Mini040414-01.dmp
Crash Time        : 4/4/2014 5:49:22 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc9e
Parameter 3       : 0xa314fae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc9e
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc9e
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini040414-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 4/4/2014 5:50:46 PM
==================================================
 
==================================================
Dump File         : Mini031514-01.dmp
Crash Time        : 3/15/2014 4:03:25 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85fc9e
Parameter 3       : 0xa40c0ae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5fc9e
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5fc9e
Stack Address 1   : win32k.sys+5fd72
Stack Address 2   : win32k.sys+e0a88
Stack Address 3   : win32k.sys+e0f80
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini031514-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 3/15/2014 4:04:46 AM
==================================================
 
==================================================
Dump File         : Mini020414-01.dmp
Crash Time        : 2/4/2014 5:17:43 PM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85a83a
Parameter 3       : 0xa3f8eae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5a83a
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5a83a
Stack Address 1   : win32k.sys+5a90e
Stack Address 2   : win32k.sys+e0a4b
Stack Address 3   : win32k.sys+e0f43
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini020414-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 2/4/2014 5:18:49 PM
==================================================
 
==================================================
Dump File         : Mini012114-01.dmp
Crash Time        : 1/21/2014 3:04:54 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85a83a
Parameter 3       : 0xa47efae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5a83a
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5a83a
Stack Address 1   : win32k.sys+5a90e
Stack Address 2   : win32k.sys+e0a4b
Stack Address 3   : win32k.sys+e0f43
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini012114-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 1/21/2014 3:06:22 AM
==================================================
 
==================================================
Dump File         : Mini122713-01.dmp
Crash Time        : 12/27/2013 6:08:46 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf85a83a
Parameter 3       : 0xa3e89ae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+5a83a
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+5a83a
Stack Address 1   : win32k.sys+5a90e
Stack Address 2   : win32k.sys+e0a4b
Stack Address 3   : win32k.sys+e0f43
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini122713-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 12/27/2013 6:10:09 AM
==================================================
 
==================================================
Dump File         : Mini111513-01.dmp
Crash Time        : 11/15/2013 6:20:16 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf866016
Parameter 3       : 0xa4608ae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+66016
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+66016
Stack Address 1   : win32k.sys+660ea
Stack Address 2   : win32k.sys+e0c49
Stack Address 3   : win32k.sys+e1141
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini111513-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 11/15/2013 6:48:44 AM
==================================================
 
==================================================
Dump File         : Mini102113-01.dmp
Crash Time        : 10/21/2013 6:29:37 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf866016
Parameter 3       : 0xa52ceae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+66016
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+66016
Stack Address 1   : win32k.sys+660ea
Stack Address 2   : win32k.sys+e0c49
Stack Address 3   : win32k.sys+e1141
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini102113-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 10/21/2013 6:50:34 PM
==================================================
 
==================================================
Dump File         : Mini082613-01.dmp
Crash Time        : 8/26/2013 9:37:34 AM
Bug Check String  : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x1000008e
Parameter 1       : 0xc0000005
Parameter 2       : 0xbf862276
Parameter 3       : 0xa5776ae4
Parameter 4       : 0x00000000
Caused By Driver  : win32k.sys
Caused By Address : win32k.sys+62276
File Description  : Multi-User Win32 Driver
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 5.1.2600.6514 (xpsp_sp3_qfe.140207-0419)
Processor         : 32-bit
Crash Address     : win32k.sys+62276
Stack Address 1   : win32k.sys+6234a
Stack Address 2   : win32k.sys+e0cf7
Stack Address 3   : win32k.sys+e11ef
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\Mini082613-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 2600
Dump File Size    : 94,208
Dump File Time    : 8/26/2013 9:38:50 AM
==================================================
KERNEL_MODE_EXCEPTION_NOT_HANDLED
A kernel mode program generated an exception which the error handler didnt catch. These are nearly always hardware compatibility issues (which sometimes means a driver issue or a need for a BIOS upgrade).


Either we are dealing with a hardware or driver issue. First question is have you recently updated any drivers on system either from the manufacturer or Windows update page?

Secondly have you recently replaced any hardware like a hd, optical drive or wireless network adapter?

This doesn't point to malware.

What I need you to do is start a new topic in our Windows forum and let the tech's there assist with tools or scans, that I can't help with.
Supply the info on BlueScreenView.

http://forums.whatthetech.com/index.php?showforum=119

Hello Juliet,

 

Re: "hardware compatibility issues . . . . need for a BIOS upgrade" Believe it or not, my next Q was gonna be along the lines of hardware rather than software.

 

Re: "have you recently updated any drivers"  No.  That was yet another problem which I could not handle when we started.  Because of the numerous crashes & exceptional time to reboot, there wasn't much that I could do.  I will now pursue that direction

 

Re: "recently replaced any hardware like a hd," Machine was "home built"  I'll recontact the manufacturer & get a refund, LOL

Re: "start a new topic in our Windows forum and let the tech's"  I will give that a shot

 

Re my quote - last post: "Repeated Updates: 16 repeated Updates on every shutdown as previously reported as being "like Groundhog Day", are now gone.  Machine shuts down as it should."  Well, THAT was premature.  Last night during shutdown, 16 updates to do once again.   :wacko:   Is there anything that you can do with this?

Hello Juliet,

 

Continuing probs:

  1. AVG: I have performed the suggestion found at 
    https://support.avg.com/SupportArticleView?l=en_US&urlname=Your-AVG-repeatedly-asks-for-restart-after-an-update
    However, it does not appear that this has solved the prob, as on reboot, I find the same result with AVG.  i.e. .  The request for update still persists in spite of getting a positive confirmation from AVG. 
    📎AVG-delete.JPG
    Hence, I will search out a different virus protection.
     
  2. Repeating Microsoft updates on shutdown: These repeating updates continue to be a problem.  Can these be resolved?
    📎Updates.png

 

let's try

[external image: MgeHyNE.png]ESET Services Repair
  • Please download ESET Services Repair and save the file to your Desktop.
  • Double-click ServicesRepair.exe to run the programme.
  • Right-Click Services.Repair.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
  • Follow the prompts.
  • Reboot your computer.
————————————

Hello Juliet,

 

Re: Read over these links, other people have run into this problem.

1- http://www.sevenforu…h-shutdown.html

2- nhttp://support.microsoft.com/kb/976982

 

Link #1> I found did not appear to be of any use as it referenced Win 7

Link # 2> I was able to retrieve the list of KB reference numbers of the problematic updates.  Although I will provide those, they were obtained BEFORE your 6:21 AM posting.

 

Re: "6:21 AM posting": I ran the ESET Services Repair.  An invisible troll must have run through my machine,  as I saw nothing happening. :huh:   Then, this "presto" post happened:

📎MS Fix it.JPG

requesting me to "Tell us what you think"   :rofl:  

 

Humor aside, Upon completing the ESET Services Repair, it appears that all of the problematic updates have been resolved.

📎Turn Off.JPG

 

I have shut down & rebooted the machine several times in order to test the results.  So far the results are consistent.

 

Although these appear to be a mute point at present (I am not holding my breath), I am posting them as requested in your 05:51 AM post.

 

================================================================

KB reference numbers of the problematic updates to follow

 

Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2898856)
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2901111)
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2898855)
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2901110)
Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2836941)
Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Server 2003, Vista and Server 2008 x86 (KB2836940)
Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2836939)
Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Server 2003, Vista, Server 2008 x86 (KB2861697)
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2863239)
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Server 2008 x86 (KB2861188)
Security Update for Microsoft .NET Framework 3.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2861189)
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2858302)
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2840628)
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2844285)
Security Update for Microsoft .NET Framework 3.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2832411)
Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Server 2003, Vista, Server 2008 x86 (KB2840629)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI