[Bob_C]

In safe mode. It's a race against time before Mozilla bumps me off with a crash report...so that's still a big issue.
I will try to run both MBytes and AVG remover from safe mode and report back.

[Advertisements]

Will attach both notepads.
When I opened MByte, I got a message again that the database was either corrupted or missing and did I want a new copy. I said yes. It sure retrieved the copy hyper quickly and said it went from version 000 to version 6 27 12 . The scan took under 2 minutes. None of that feels right to me.
I ran AVG remover again but it did nothing but produce a log. I think it did its trick yesterday when it actually requested a re-start. I don't see any avg reference in the add/removed list.
Logs:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.27.03

Windows XP Service Pack 3 x86 NTFS (Safe Mode/Networking)
Internet Explorer 8.0.6001.18702
Bob :: BOB-3CDE5CE5327 [administrator]

5/27/2012 8:26:46 AM
mbam-log-2012-05-27 (08-26-46).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 183175
Time elapsed: 1 minute(s), 53 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

2012-05-27 15:30:17,859 INFO AvgRemover 2012.0.5
-------------------------------------------------------
2012-05-27 15:30:17,875 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2012-05-27 15:30:17,875 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2012-05-27 15:30:17,875 DEBUG Reading AVG IDS\IDS\InstallDir value failed (error: e001003d)
2012-05-27 15:30:17,875 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)
2012-05-27 15:30:17,875 INFO Command line: "C:\Documents and Settings\Bob\Desktop\avg_remover_stf_x86_2012_2125.exe"
2012-05-27 15:30:17,875 WARN AvgDir param empty, but Remover found AvgDir at 'C:\Program Files\AVG\AVG2012\', use this path as default.
2012-05-27 15:30:17,875 WARN AvgDataDir param empty, but Remover found AvgDataDir at 'C:\Documents and Settings\All Users\Application Data\AVG2012\', use this path as default.
2012-05-27 15:30:22,609 INFO AvgRemover runs in attempt number 1
2012-05-27 15:30:22,609 INFO Attempting to unregister AVG from the Windows Security Center.
2012-05-27 15:30:22,609 INFO Attempting to uninstall AVG Identity Protection.
2012-05-27 15:30:22,656 INFO Attempting to uninstall toolbar

[Bob_C]

Will attach both notepads.
When I opened MByte, I got a message again that the database was either corrupted or missing and did I want a new copy. I said yes. It sure retrieved the copy hyper quickly and said it went from version 000 to version 6 27 12 . The scan took under 2 minutes. None of that feels right to me.
I ran AVG remover again but it did nothing but produce a log. I think it did its trick yesterday when it actually requested a re-start. I don't see any avg reference in the add/removed list.
Logs:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.27.03

Windows XP Service Pack 3 x86 NTFS (Safe Mode/Networking)
Internet Explorer 8.0.6001.18702
Bob :: BOB-3CDE5CE5327 [administrator]

5/27/2012 8:26:46 AM
mbam-log-2012-05-27 (08-26-46).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 183175
Time elapsed: 1 minute(s), 53 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

2012-05-27 15:30:17,859 INFO AvgRemover 2012.0.5
-------------------------------------------------------
2012-05-27 15:30:17,875 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2012-05-27 15:30:17,875 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2012-05-27 15:30:17,875 DEBUG Reading AVG IDS\IDS\InstallDir value failed (error: e001003d)
2012-05-27 15:30:17,875 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)
2012-05-27 15:30:17,875 INFO Command line: "C:\Documents and Settings\Bob\Desktop\avg_remover_stf_x86_2012_2125.exe"
2012-05-27 15:30:17,875 WARN AvgDir param empty, but Remover found AvgDir at 'C:\Program Files\AVG\AVG2012\', use this path as default.
2012-05-27 15:30:17,875 WARN AvgDataDir param empty, but Remover found AvgDataDir at 'C:\Documents and Settings\All Users\Application Data\AVG2012\', use this path as default.
2012-05-27 15:30:22,609 INFO AvgRemover runs in attempt number 1
2012-05-27 15:30:22,609 INFO Attempting to unregister AVG from the Windows Security Center.
2012-05-27 15:30:22,609 INFO Attempting to uninstall AVG Identity Protection.
2012-05-27 15:30:22,656 INFO Attempting to uninstall toolbar

[Bob_C]

Probably nothing but when I looked in C Drive there is a folder there named $AVG. Inside of it are two folders named $CHJW and $Vault.

[CompCav]

Looks like there may be some dirty sectors on the disc

Dakeyras has a nice little tutorial on it here



After that please run this:

In Safe Mode with Networking, please do the following:

Blue Screen Errors

• Click here to download BlueScreenView or here
• Right click bluescreenview.zip and choose "Extract All" or "Extract Here" to extract the contents of the zip file
• Once extracted, double click on BlueScreenView.exe to run the program
• Click Edit, then Select All
• Click File, then Save Selected Items
• In the File name, type bluescreenlog.txt and then Save it to your Desktop
• Open bluescreenlog.txt, then copy and paste all of the contents into your next reply

[Bob_C]

Ran chkdisk
Ran bluescreenview
had 1 firefox crash report
Had 1 bluescreen driver corrupt message
Always in safe mode
Here's the log
==================================================
Dump File : Mini052712-02.dmp
Crash Time : 5/27/2012 4:15:51 PM
Bug Check String : POOL_CORRUPTION_IN_FILE_AREA
Bug Check Code : 0x000000de
Parameter 1 : 0x00000002
Parameter 2 : 0xe209a344
Parameter 3 : 0xe209a189
Parameter 4 : 0x0c3f48c6
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+5c876
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntoskrnl.exe+5c876
Stack Address 1 : ntoskrnl.exe+49650
Stack Address 2 : ntoskrnl.exe+1de69
Stack Address 3 : ntoskrnl.exe+1f407
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052712-02.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052712-01.dmp
Crash Time : 5/27/2012 8:20:21 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xe31b3d84
Parameter 2 : 0x00000000
Parameter 3 : 0x8062b2d5
Parameter 4 : 0x00000001
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+1542d5
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntoskrnl.exe+1542d5
Stack Address 1 : ntoskrnl.exe+154651
Stack Address 2 : ntoskrnl.exe+15469d
Stack Address 3 : ntoskrnl.exe+15cd42
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052712-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052612-05.dmp
Crash Time : 5/26/2012 9:19:21 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x1000000a
Parameter 1 : 0x08758b08
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x805618ef
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+8a8ef
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntoskrnl.exe+8a8ef
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052612-05.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052612-04.dmp
Crash Time : 5/26/2012 9:15:09 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x1000000a
Parameter 1 : 0x00720085
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x8051232f
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+3b32f
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntoskrnl.exe+3b32f
Stack Address 1 : ntoskrnl.exe+3c210
Stack Address 2 : ntoskrnl.exe+3c3ca
Stack Address 3 : ntoskrnl.exe+45b1c
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052612-04.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052612-03.dmp
Crash Time : 5/26/2012 4:13:20 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0xfffdffff
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+21ca3
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntoskrnl.exe+21ca3
Stack Address 1 : ntoskrnl.exe+45c4f
Stack Address 2 : ntoskrnl.exe+3cb8c
Stack Address 3 : ntoskrnl.exe+695f4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052612-03.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052612-02.dmp
Crash Time : 5/26/2012 3:03:35 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8062ea71
Parameter 3 : 0xa97e0b04
Parameter 4 : 0x00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+157a71
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntoskrnl.exe+157a71
Stack Address 1 : ntoskrnl.exe+14d401
Stack Address 2 : ntoskrnl.exe+1517ac
Stack Address 3 : ntoskrnl.exe+144618
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052612-02.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052612-01.dmp
Crash Time : 5/26/2012 2:51:56 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xcfef0008
Parameter 2 : 0x00000000
Parameter 3 : 0xbf1d0dd2
Parameter 4 : 0x00000000
Caused By Driver : igxpdx32.DLL
Caused By Address : igxpdx32.DLL+4dd2
File Description : DirectDraw® Driver for Intel® Graphics Technology
Product Name : Intel Graphics Accelerator Drivers for Windows NT®
Company : Intel Corporation
File Version : 6.14.10.4764
Processor : 32-bit
Crash Address : igxpdx32.DLL+4dd2
Stack Address 1 : igxpdx32.DLL+4b3d
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052612-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini052412-01.dmp
Crash Time : 5/24/2012 8:36:38 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xc7b0e2e5
Parameter 2 : 0x00000001
Parameter 3 : 0xe29f5de8
Parameter 4 : 0x00000000
Caused By Driver :
Caused By Address :
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Crash Address :
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052412-01.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

[CompCav]

Some of these indicate a memory issue.

Please run this memory test:

http://www.geekstogo...sing-memtest86/
The guide is comprehensive with images.

If you get evidence of a bad memory stick remove all but one and test them one at a time for 8 full cycles.

[Bob_C]

Some of these indicate a memory issue.

Please run this memory test:

http://www.geekstogo...sing-memtest86/
The guide is comprehensive with images.

If you get evidence of a bad memory stick remove all but one and test them one at a time for 8 full cycles.

I'll follow the instructions for the memory test, but pretty sure I won't know how to remove memory sticks properly...or even what they might look like. I thought I had just 2 (each at 256)
By coincidence, I do have two newly purchased 1G memory sticks from crucial.com that I haven't even opened as this was happening when they arrived. I was going to have a local geek squad type employee install them for me by replacing my 2- 256 ram sticks.
Anyway, I'll try to run the tests, assuming I can follow the directions. I'm still in safe mode. Is that necessary or advised right now?

[Bob_C]

I've read most of memtest. However I DON'T HAVE A CD BURNER WHICH SEEMS TO BE REQUIRED. I don't suppose that I can continue without??

[Bob_C]

So I guess what maybe I should do at this point is take my tower in to have the 2 sticks of RAM installed...since it's RAM we are trying to pinpoint. If we can violate the 48 hour rule of this forum, let me get the RAM installed, then come back here to report. Perhaps then do some analysis? If things look OK, maybe help me with some cleanup after these various applications and zips have been taken on to my desktop.
Or do you have a different idea. It does not look like I can run the MemTest.
I'll wait to hear.
Still in safe mode. Is that needed now? Or just a good idea until we come to some resolution.
Thanks for your time and reply.

[CompCav]

Do you have a CD player on this machine?

Can you use a friends CD burner on their computer to make this disk?

[CompCav]

Here is a USB flash drive installer.

Make sure if there is anything on the USB drive that you back it up before running this.

Download the installer here.

Unzip it to your desktop.
Insert the USB flash drive.
Double click it to run it and follow the prompts.
Once it is created reboot and start tapping F12
Then select boot from USB and enter.
Allow it to run and check the results.

[Bob_C]

I do have a cd drive but do not know anyone locally with a burner to use. I will assume your 2nd post with the flash drive zip will accomplish the same thing. I will report back after I hopefully run it successfully. Will there be a log to attach?
Thanks for sticking with this. I'm running in normal mode not safe mode. Only one mozilla crash so far.

[Bob_C]

F12 is not allowing me to do anything differently. The machine goes to its normal Windows boot and straight to my normal desktop. However, the first screen I see that flashes by offers the choice of pressing esc to go to the boot menu. I suppose I should try that? I hesitate to make decisions on my own here, so will wait for your reply. Sorry, I have just enough knowledge to screw things up but not enough to feel confident at all!!

[CompCav]

Yes use Esc to go to boot menu.

I am glad you feel comfortable asking so ask away!!!

CompCav

[Bob_C]

Taking a while. It's on its sixth pass. I wonder how many passes it will do. Hey, there's only 43264 errors counted so far. I see L1 cache listed as 16K and L2 cache listed as
256 K.
I don't know if this will generate a report or what it is you will want to see when it is finally done.
I'll report back when this is done and hopefully there wll be something obvious to report.