ok here's the list from HJT.
????2
©_ÆF¤ý
3ds max 6
ABIT uGuru
AC-3 ACM Decompressor
ACDSee 7.0 PowerPack
ACE Mega CoDecS Pack
Ad-Aware SE Personal
Adobe After Effects 6.5
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Illustrator CS2
Adobe Photoshop CS2
Adobe Premiere Pro
Adobe Reader 7.0
Adobe SVG Viewer 3.0
ADSL Ethernet Modem Utility
Alien Skin Eye Candy 5 Nature
ATI Display Driver (Omega 2.6.71)
Audacity 1.2.3
Audio Conversion Studio
BitComet 0.59
BitTornado 0.3.7
Cablenut 4.08
CCleaner (remove only)
CDex extraction audio
Cleaner 5 EZ
ColorNick v2 plugin for Messenger Plus!
Counter-Strike: Condition Zero
Debugging Tools for Windows
EAX4 Unified Redist
EPSON CardMonitor
EPSON Copy Utility 3
EPSON PhotoQuicker3.5
EPSON PhotoStarter3.1
EPSON PRINT Image Framer Tool2.1
EPSON Printer Software
EPSON Smart Panel
EPSON Web-To-Page
ESCX3500 Reference Guide
ESCX3500 Software Guide
ewido security suite
File Transfer Plus 1.1 RELEASE
FINAL FANTASY XI for Windows - Official Benchmark Program 3
FlashGet(JetCar)
FlashMenu
Girl
Google Earth
Google Toolbar for Internet Explorer
GTA San Andreas
GTH(cn)
GTH(en)
GunboundWC
HijackThis 1.99.1
ICQ Toolbar
ICQ 5
Kazaa Lite K++ v2.4.3
Kazaa Lite Resurrection 0.0.7.6 F
LiveUpdate 2.6 (Symantec Corporation)
Macromedia Dreamweaver MX
Macromedia Extension Manager
Macromedia Fireworks MX
Macromedia Flash MX
Macromedia FreeHand 10
Macromedia Shockwave Player
MAIET Gunz
Messenger Plus! 3
Microsoft Halo
Microsoft Office FrontPage 2003
Microsoft Office Professional Edition 2003
Microsoft Windows Media Video 9 VCM
mIRC
Mobydock DX 0.87b
Mozilla Firefox (1.0.4)
MSN Messenger 7.5
MSN Music Assistant
MSXML 4.0 SP2 Parser and SDK
MultiRes (remove only)
Need for Speed Underground 2
Nero OEM
NJStar Communicator
NVIDIA Drivers
NvMixer
PHILIPS PC Camera
PIF DESIGNER2.1
Prime95
Pro Evolution Soccer 4
QuarkXPress 6.5
QuickSFV (Remove only)
QuickTime Alternative 1.40
Radeon Omega Drivers v2.6.61 Setup Files and Tools
Radeon Omega Drivers v2.6.71 Setup Files and Tools
Ragnarok Sakray
Real Alternative 1.30
SafeCast Shared Components
Samsung PC Studio PIM & File Manager 1.0
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB903235)
Shui Hu Fantasy Online Version 2.1.1
Skype 1.2
SmartFTP
Spy Sweeper
Steam
Street Racing Syndicate ™
StuffPlug-NG (Messenger Plus! Plugins)
StyleXP (remove only)
Swift 3D Version 4.00
Themexp.org File
Trend Micro PC-cillin Internet Security 2005
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Winamp (remove only)
Winamp Japanese Language Pack 0.2
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows Messenger 5.1
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB887797
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WinRAR archiver
X-Change 2
XIII
XviD MPEG-4 Codec
YAMAHA MidRadio Player
---------------------------------
Now another problem. I've run the the latest update for PC-Cillin Internet Security 2005 inside the PC-Cillin program, in the download window, until around 100%, ya.... the BSOD pop out suddently. just to make sure, i've tried it again, the update aint completed, run it, then same again.
Tis is the dump file tat i load up with Microsoft Windows Debug. and i think is almost the same as the b4 one. (after i adjust, tis tim is a completel dump. the b4 one is a small memory dump)
Microsoft ® Windows Debugger Version 6.5.0003.7
Copyright © Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini092805-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \WINDOWS\system32\KERNEL1.EXE, Win32 error 2
*** WARNING: Unable to verify timestamp for KERNEL1.EXE
*** ERROR: Module load completed but symbols could not be loaded for KERNEL1.EXE
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Wed Sep 28 21:00:32.718 2005 (GMT+8)
System Uptime: 0 days 0:16:24.535
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \WINDOWS\system32\KERNEL1.EXE, Win32 error 2
*** WARNING: Unable to verify timestamp for KERNEL1.EXE
*** ERROR: Module load completed but symbols could not be loaded for KERNEL1.EXE
Loading Kernel Symbols
................................................................................................................................................
Loading unloaded module list
..........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 804d92c2, b7145c88, 0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** WARNING: Unable to verify timestamp for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
*** WARNING: Unable to verify timestamp for mrxsmb.sys
*** ERROR: Module load completed but symbols could not be loaded for mrxsmb.sys
Probably caused by : mrxsmb.sys ( mrxsmb+8d00 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 804d92c2, The address that the exception occurred at
Arg3: b7145c88, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
MODULE_NAME: mrxsmb
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 41ede18a
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
nt+22c2
804d92c2 ?? ???
TRAP_FRAME: b7145c88 -- (.trap ffffffffb7145c88)
Unable to read trap frame at b7145c88
CUSTOMER_CRASH_COUNT: 6
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
LAST_CONTROL_TRANSFER: from b7145d64 to 804d92c2
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
b7145cf8 b7145d64 b6f5e81d b7145d18 0014e1ce nt+0x22c2
b7145d30 804de7ec 00000094 00000000 00000000 0xb7145d64
b7145d64 7c90eb94 badb0d00 00128be4 b6f50d98 nt+0x77ec
b7145d68 badb0d00 00128be4 b6f50d98 b6f50dcc 0x7c90eb94
b7145d6c 00128be4 b6f50d98 b6f50dcc 00000000 mrxsmb+0x8d00
b7145d70 b6f50d98 b6f50dcc 00000000 00000000 0x128be4
b7145d74 b6f50dcc 00000000 00000000 00000000 0xb6f50d98
b7145d78 00000000 00000000 00000000 00000000 0xb6f50dcc
FOLLOWUP_IP:
mrxsmb+8d00
badb0d00 ?? ???
SYMBOL_STACK_INDEX: 4
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: mrxsmb+8d00
IMAGE_NAME: mrxsmb.sys
STACK_COMMAND: .trap ffffffffb7145c88 ; kb
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
Edited by philippecr, 28 September 2005 - 07:29 AM.
Sign In
Create Account
