What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

My computer reboots and gets a blue screen when I connect to my local

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
hello everyone,
Lately I've been having problems with my local network connections. Every time I try to connect to a computer on my network my computer reboots with a blue screen. when I check the winXP event log it says save dump and thatt code "0x00000019 (0x00000020, 0x862e69a0, 0x862e72d8, 0xdf27acca" and talks about "error verification". My computer also reboots when I try to connect with remote desktop connection.

I have a router/modem it is the inventel livebox from my internet provider, no driver was required, just entering the access code on the router to use my internet service provider. My main computer is connected to it via wifi (P5AD2 deluxe motherboard integrated wifi) and my small comp is connected to the router via ethernet. So both comps are connected to router and that's how they communicate with one another.I have no problem accessing the internet on both the comps. The problem is accessing the files on the small computer. Every time I connect to the shared folder, I get the blue screen. plus, I get the blue screen when I connect via the remote desktop tool. I've managed to make it work but it was a long time ago, I can't remember installing anything new that could have made the system unstable (hardwarewise that is).

the blue screen says this as well ( it changes a lot)
PAGE_FAULT_IN_MOPAGED_AREA

STOP: 0x00000050 ( 0x8F268C26, 0x00000000, Ox8056537F, 0x00000000)

and then the event log :


it said that the browser couldn' find the server list on the "master browser?" on the network \Device\NetBT_Tcpip_{03594DC7-B7F5-4FF1-B62C-46D22FCA2C5D}. Sorry for translation, the text is already a very bad translation of the original english text.

then MRxSmb error number 8003, impossible to translate that though…




Logfile of HijackThis v1.99.1
Scan saved at 19:10:10, on 07/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Virtual CD v8\System\VC8SecS.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Virtual CD v8\System\VC8Play.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT folder\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-f7ed0776fb27} - c:\program files\steganos internet anonym 2006\sia2006iep.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NotebookHardwareControl] "C:\Program Files\Notebook Hardware Control\nhc.exe" -quiet
O4 - HKLM\..\Run: [VC8Player] C:\Program Files\Virtual CD v8\System\VC8Play.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/games/clients/y/pyt1_x.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1155665389101
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Program Files\Virtual CD v8\System\VC8SecS.exe
Post #2
Welcome to the forum :wavey:

I don't want to alarm you, but one of the possible causes for the error you are getting is "rootkit" infection.

Emphasis on "possible". There are other causes.

Since I don't see any malware present, let's just "cut to the chase", and look for a rootkit first.

Download Blacklight Beta from here:

Blacklight Beta

Hit I accept. It will take you to download page.

Download blbeta.exe (graphical user interface version) and save it to the Desktop.

Once saved… double click blbeta.exe to install the program.

Click accept agreement and Click scan

This application may cause a warning from your antivirus. Let it load.

Wait for it to finish.

If it displays any items…don't do anything with them yet. Just hit exit (close)

It will drop a log on Desktop that starts with fsbl….(big number)

Post that log.
:)
Post #3
hi Micah =), tx for your reply, Here is what the log says 09/08/06 19:11:12 [Info]: BlackLight Engine 1.0.46 initialized 09/08/06 19:11:12 [Info]: OS: 5.1 build 2600 (Service Pack 2) 09/08/06 19:11:12 [Note]: 7019 4 09/08/06 19:11:12 [Note]: 7005 0 09/08/06 19:11:16 [Note]: 7006 0 09/08/06 19:11:16 [Note]: 7011 1016 09/08/06 19:11:16 [Note]: 7026 0 09/08/06 19:11:16 [Note]: 7026 0 09/08/06 19:11:16 [Note]: 7015 932 09/08/06 19:11:16 [Note]: 7015 5 09/08/06 19:11:16 [Note]: 7015 1656 09/08/06 19:11:16 [Note]: 7015 5 09/08/06 19:11:21 [Note]: FSRAW library version 1.7.1019 09/08/06 19:12:08 [Note]: 7007 0 hope that helps ^^ Nico
Post #4
That's a relief.

No rootkit :thumbup:

Please try this free online virus scan of your system:

Trend-Micro Housecall
Put on 'Autoclean' and delete what it can't clean.

Reboot afterwards.

See if there is any change in your situation.
:)
Post #7
hey so it did'nt work, but I have kasperky antivirus, updated and running. so I don't think I have a virus probleme. Plus I don't go on weird sites and I don't really download a lot of stuff. Nico
Post #12
This topic is now closed.

If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI