[dieterschmied]

I had inadvertently got attacked by one of those site that offers a free scan for virus protection and I could not get it off of my machine. In my efforts I ended up with a blue screen with the claim that I have a "page fault in nonpaged area" and it instructs me to remove cache, shadowing and various other exercises that can't be done or are not relevant. There is also a series of changing causes similar, if not the same, as those reported by others that are having problems and are similarly titled in this forum area.

So long as I am using the computer, there seems to be no problem, but when I am inactive for a few minutes, the blue screen appears telling me that I have this page fault and then starts to restart but it really is not actually restarting even though the windows introductory screen appears like when we boot the system. If I hit f8 or f9 or sometimes the space bar the desktop appears with the blank icon forms and proceeds to fill in the icons with colors but also the page that I was working on last comes up immediately as if it never shut down in the first place. I am using the firefox browser and all of the tabs are retained. I can call up solitaire or whatever just like when everything is normal.

I get a different message every time like : Bad_Pool_Header or, Sysinternal_great_site or, irql_not_less_or_equal or, Panic_stack_switch ... .

Other than the blue screen, the restart cycle that may not really be restarting but still appears to, seemingly slower response to changing sites or pages and the feeling that I am infected, the machine seems to function well. It definitely is slower filling in the icons so I think my memory is being used.

I want to tell you that I have two hard drives installed. My old computer gave out and I had just got a new one by coincidence that had a larger hard drive and I wanted to clean up the old drive of what I wanted to save. So I just added the hard drive from the old machine. There was an operating system on both hard drive, but I haven't seen an indication that the computer is using the old programs unless I actually tell it to such as in a search for a file or to find old addresses. I tell you this even though the machine had been working fine until this adware attack. I no longer see any sign of the adware anymore.

I have found the minidump file and have unzipped it; it is now a text file. I will copy it and put it on the next reply window if that is what you want.

[dieterschmied]

oops!

That did not work. I got the following error message: " 1. The text that you have entered is too long (1046930 characters). Please shorten it to 30000 characters long."

Any suggestions?

[kniht]

Hey dieterschmied,

When you added the old hdd did you change the jumpers to slave? Or did you use the old hdd as master?

BTW what site did you do a scan with that caused problems?

[oshwyn5]

http://www.aumha.org/a/stop.php
0x0000000A: IRQL_NOT_LESS_OR_EQUAL
Typically due to a bad driver, or faulty or incompatible hardware or software.

0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
Requested data was not in memory. An invalid system memory address was referenced. Defective memory (including main memory, L2 RAM cache, video RAM) or incompatible software (including remote control and antivirus software) might cause this Stop message, as may other hardware problems (e.g., incorrect SCSI termination or a flawed PCI card).

Added any new hardware or software recently?

[dieterschmied]

I set up the new and biggest hard drive as the master and the older hard drive a slave.

The offending software site was antivirusxp2008 aka antivirusxp.

[dieterschmied]

Actually the whole computer is less than three months old. We did have an initial problem installing the system software until we just formatted and quit using Windows 2000 and went to XP and it went smoothly.

I think of the possible causes shown, the antivirus xp2008 and their free scan was the culprit. I don't think that I even tried the free scan; I was held captive when it wouldn't release even using the Task Manager. They hid files in strange places that would allow deletion even when I found them. It was brutal.

[kniht]

It would be helpful if you could upload the latest dump file in the Windows minidump folder.

[dieterschmied]

Did you see the second post above. I tried to download it but it was too big. Have you a suggestion. I have it setting here but I don't know how to send it. Please advise..