1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Last blue screen saved somewhere?

Discussion in 'Windows XP' started by TinTin77, Feb 5, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. TinTin77

    TinTin77 Thread Starter

    Joined:
    Feb 5, 2007
    Messages:
    5
    Hi guys,

    I've a problem: my pc sometimes resets. It shows a bluescreen and then resets. The problem is that the reset is followed almost immediately after the bluescreen. I can't read the bluescreen. Is there a way to retrieve the last bluescreen. Is it saved somewhere?

    Thanks,
    Tintin
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Open System Properties (run: sysdm.cpl) and select Advanced > Startup and Recovery.

    Take the check out of "automatically restart"

    Also, do this:

    I can run a debugging utility on the dump files if you do this:

    1 > create a new folder on the desktop and call it "dumpcheck" or whatever you like
    2 > navigate to %systemroot%\minidump and copy the last few minidump files to that folder. They are numbered by date. You can paste that address in address bar to get there. "%systemroot%" is normally c:\windows
    3 > close the folder and right click on it and select "Send to (folder name).zip"
    4 > use the "manage attachments" in the "advanced" reply window to upload that zip file here as an attachment.

    This might point us to a 3rd party driver causing the error, if one exists for it.

    Since almost all bugchecks can be caused by faulty ram, I would recommend you perform memory tests.

    Beginners Guides: Diagnosing Bad Memory

    Windows Memory Diagnostic
    Memtest86 - A Stand-alone Memory
     

    Attached Files:

  3. TinTin77

    TinTin77 Thread Starter

    Joined:
    Feb 5, 2007
    Messages:
    5
    Hi Rollin Rog,

    Thanks for the tips. I've disabled automatic restarts.
    I also attached the latest minidump. It's from feb 1st. Strange thing is that I yesterday got a reset with bluescreen. it seems that there's no minidump saved from this crash.

    I will do a memory check.

    Thanks very much!
     

    Attached Files:

  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    This is the basic information, there is no faulting driver file mentioned:

    http://support.microsoft.com/?kbid=137539&sd=RMVP


    One thing to try if you have more than one physical module installed -- is to remove one at a time -- both for software testing -- and booting and see what happens.

    By the way is viexca2k.sys http://www.infoexpress.com/security_products/firewall_overview.php

    This driver ** WARNING: Unable to verify timestamp for wincom32.sys is suspicious and may be a rootkit trojan, can you locate it?

    http://www.google.com/search?client=opera&rls=en&q=wincom32.sys&sourceid=opera&ie=utf-8&oe=utf-8

    Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

    http://www.thespykiller.co.uk/files/hijackthis_sfx.exe


    >> let's do this from the gitgo: Start > Run cmd at the command prompt type and enter:

    sc delete wincom32 and then reboot. If you get an error message let me know -- that appears to be the "display name" of this malware service, and the command should delete it.

    ref: http://reviews.cnet.com/4520-6600_7-6686799.html

    Also look for and delete:

    peers.ini

    Search for it in the Windows directory
     
  5. TinTin77

    TinTin77 Thread Starter

    Joined:
    Feb 5, 2007
    Messages:
    5
    Hi,

    I just ran a memory test (memtest86+). All tests passed... So it seems that it isn't a memory problem.
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Check my edited post.

    You have a trojan.

    Follow instructions to delete the service for it and reboot. Post a HijackThis scanlog.
     
  7. TinTin77

    TinTin77 Thread Starter

    Joined:
    Feb 5, 2007
    Messages:
    5
    I removed the wincom32 successfully
    I indeed use CyberArmor so viexca2k.sys isn't a trojan or other spyware.

    I use both spybot and adaware to remove spyware and other less friendly stuff. The only thing which always returns is SmitFraud-C. Other spyware isn't detected by both programs.

    I hope the problem is now solved. If my machine still resets, I will run a hijackthis scan and post it...

    Thx!
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    If the scanlog is clear and there is no more rebooting -- you can use the thread tools menu here to mark the thread "Solved".

    You're certainly welcome for the help.
     
  9. TinTin77

    TinTin77 Thread Starter

    Joined:
    Feb 5, 2007
    Messages:
    5
    Okay... It seems to be solved. Last two weeks it crashed at least once a day. Yesterday and today my machine works perfect again.

    ps: I will change the thread state to solved.

    Thx!
     
  10. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
  11. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/541338

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice