Author Topic: Blue screened twice....  (Read 664 times)

Offline MadHatter

  • Hero Member
  • *****
  • Posts: 2008
  • Karma: +0/-0
    • View Profile
    • http://
Blue screened twice....
« on: November 16, 2007, 08:07:48 PM »
i blue screened yesterday, and then i had to insert my vista ultimate installation cd to repair the system32 file. i think it was related to a problame with installing a update because after i downloaded the update and turned my computer off it would say "configuring updates" then it would restart and say the same "configuring updates" thing and after that it would restart and i could log in normally and when i turned off my computer after that it would d the same thing. and eventually it blue screened and i couldnt boot in safe mode, causing me restart.

to clarify things...the updates DID NOT install.

thena  few minutes ago i blue screened and it didnt tell me why... here is my hijack this log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:02:51 PM, on 11/16/2007
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16546)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Windows\ehome\ehtray.exe
C:\Users\rpatel\AppData\Local\Temp\Rar$EX01.918\AveThumbnailSizer.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [NvSvc] "RUNDLL32.EXE" C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WAWifiMessage] "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe"
O4 - HKLM\..\Run: [hpWirelessAssistant] "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [QlbCtrl] "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" /Start
O4 - HKLM\..\Run: [SynTPStart] "C:\Program Files\Synaptics\SynTP\SynTPStart.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [AveThumbnail] "C:\Users\rpatel\AppData\Local\Temp\Rar$EX01.918\AveThumbnailSizer.exe" -hide
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\deskscapes.dll
O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DesktopControlPanel.dll
O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DreamControl.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 8291 bytes
msn: [email protected]

MM'd: 932m & $321.00 and 17 accounts

[quote name='JBLee / Jason' post='295082' date='Feb 28 2007, 06:47 PM']gad damn u....i made a thread already IN THE RIGHT FORUM!!!!



why does every1 always do this...even if he is dead he would want us to put things in the right forum  [To Allanon's "dead" self][/quote]



BEST topic ever made on TTG right here

http://www.thetechguide.com/forum/index.ph...mp;#entry295295




Offline Small Shoe Magoo

  • 2X less awesome than Allanon
  • Hero Member
  • *****
  • Posts: 2707
  • Karma: +0/-0
    • View Profile
    • http://
Blue screened twice....
« Reply #1 on: November 16, 2007, 08:22:39 PM »
Can you remember any errors you received at first?

You might also want to check for viruses, maybe with a new virus protection program. I see you have spywareguard, spysweeper, and kaspersky. I would recommend uninstalling spywareguard... as two antiviruses/spyware are more than enough. See if the cause is a malicious program.

If not, do a system restore to a date before you downloading the updates. Vista should have made a backup point before downloading them.

Also, did you install any new devices recently?

C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE

What is that?

I've checked up on people having similar problems to this, some have been fixed with a restore point, while some ended up completely reformatting, and some had some luck going into safe mode. When you would go into safe mode, did it restart, or take a while to load?
« Last Edit: November 16, 2007, 08:26:26 PM by Zack The Man »

Offline MadHatter

  • Hero Member
  • *****
  • Posts: 2008
  • Karma: +0/-0
    • View Profile
    • http://
Blue screened twice....
« Reply #2 on: November 17, 2007, 10:38:03 AM »
while my ccomputer was repairing, it gve me the option to system restore and it restored to before the updates were downloaded. now i can't download the update, it gives me a error whenever i try to download it.
msn: [email protected]

MM'd: 932m & $321.00 and 17 accounts

[quote name='JBLee / Jason' post='295082' date='Feb 28 2007, 06:47 PM']gad damn u....i made a thread already IN THE RIGHT FORUM!!!!



why does every1 always do this...even if he is dead he would want us to put things in the right forum  [To Allanon's "dead" self][/quote]



BEST topic ever made on TTG right here

http://www.thetechguide.com/forum/index.ph...mp;#entry295295




Offline Small Shoe Magoo

  • 2X less awesome than Allanon
  • Hero Member
  • *****
  • Posts: 2707
  • Karma: +0/-0
    • View Profile
    • http://
Blue screened twice....
« Reply #3 on: November 17, 2007, 11:08:44 AM »
Which update was it, and what error does it give?

Offline quick69gto

  • stranger
  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
Blue screened twice....
« Reply #4 on: November 17, 2007, 02:24:55 PM »
The latest updates for Vista have been giving everyone fits by doing exactly as you described.
Most (including me) have been reporting several re-boots before it finishes installing the updates.
Some PCs went through the whole process and resulted in the updates not installing.
Some blue screened.
Go to add/remove/show installed updates and try to uninstall the latest ones. You may have to do it in safe mode.
If it's successful then wait for SP1 after the first of the year.
If it still BSODs, then you may have to do a clean install.

Good luck!

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Blue screened twice....
« Reply #5 on: November 17, 2007, 10:14:05 PM »
Quote
Which update was it, and what error does it give?
Yes, give us a clue please
Is this the same error message?
http://support.microsoft.com/kb/932141
« Last Edit: November 17, 2007, 10:16:03 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline MadHatter

  • Hero Member
  • *****
  • Posts: 2008
  • Karma: +0/-0
    • View Profile
    • http://
Blue screened twice....
« Reply #6 on: November 18, 2007, 10:33:39 AM »
Weird, i thought i posted it was update

Update for Windows Vista (KB941649)

Download size: 5.2 MB

You may need to restart your computer for this update to take effect.

Update type: Recommended

This update resolves some compatibility and reliability issues in Windows Vista. By applying this update, you can achieve better reliability and hardware compatibility in various scenarios. After you install this item, you may have to restart your computer.

More information:
http://support.microsoft.com/kb/941649

Help and Support:
http://support.microsoft.com


Also, i tried uninstalling update KB905866 (installed on 11/14/07) but it gives me a error

my system is very unstable, i crashed twice and when i press sleep and then close my lid my computer turns off and when i try logging in it says could not connect to the system event notification utility and it has failed the log in. and my firefox and my explorer and taskbar stuff doesn't save, for example i added bookmarks on Firefox and they don't save and go back to their previous state and when i change the appearance of explorer or of the taskbar it reverts to its older appearance and yeah....


pissing me off.....stupid vista i really want xp now
« Last Edit: November 18, 2007, 01:49:35 PM by MadHatter »
msn: [email protected]

MM'd: 932m & $321.00 and 17 accounts

[quote name='JBLee / Jason' post='295082' date='Feb 28 2007, 06:47 PM']gad damn u....i made a thread already IN THE RIGHT FORUM!!!!



why does every1 always do this...even if he is dead he would want us to put things in the right forum  [To Allanon's "dead" self][/quote]



BEST topic ever made on TTG right here

http://www.thetechguide.com/forum/index.ph...mp;#entry295295