Blue screen, internal kernel

[placou 1968]

can someone help with this, i got blue screen i was about 5 seconds using hitman pro. in the admin side. ( i was running it for its updates) .the screen went blue and all i could read was "internal kernal .......if this is the first time you have seen this screen......... then it disappeared and i could not finish reading, i dont think anyone could read that fast, thanks in advance

problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.2
Locale ID: 1033

Additional information about the problem:
BCCode: 93
BCP1: 00003150
BCP2: 00000000
BCP3: 00000000
BCP4: 00000000
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\Mini090513-01.dmp
C:\Users\mom\AppData\Local\Temp\WER-66784-0.sysdata.xml
C:\Users\mom\AppData\Local\Temp\WERAF8F.tmp.versio n.txt

[Remah]

What sort of help do you want?

Here's Microsoft's general advice on the topic of BSOD:
http://windows.microsoft.com/en-US/w...s-in-Windows-7

I'd normally just restart and check that the system is OK: disk check, memory check, Windows SFC.

It usually doesn't happen again so the first question is: Is it reproducible ? If you can't reproduce it then you probably don't have an ongoing problem.

If you can reproduce it then sending the dump to Hitman and then Microsoft are possible options.

You're also running Vista so I'd lean towards upgrading if you can't get rid of the problem.

This is what Microsoft says about BCCode 93:
http://msdn.microsoft.com/en-us/libr...=vs.85%29.aspx

[placou 1968]

i just went into event viewer and in systems, i found ERROR that the previous system shutdown was unexpected, and a warning, kernal module had suddenly lost power. i was only inquiring because i have never seen it ( the blue screen ) i have never read anything good about getting one, i guess i was seeking a translation of the posting, thanks for the links, the latter of the 2 will apply, thanks again.

[Anupam]

It might have been a temporary issue, most likely because of Hitman Pro, for whatever reasons.

Download BlueScreenView from here:

http://www.nirsoft.net/utils/blue_screen_view.html

It's a great little program from Nirsoft. Run the program, and open the Minidump file from

C:\Windows\Minidump\Mini090513-01.dmp

The program will highlight the source of the problem as shown in the image on the product page.

Post the highlighted filename here.

[placou 1968]

i located this, could this cause the above mentioned blue screen ? even though i read the info provided about virus alert, im uncertain about removal, any words of wisdom would be appreciated, i use mse, hitman, mbam, ccleaner, kaspersky root kit removal tool and winpatrol +, nothing catching "msident" i just happen to see it under active x, all but mse are set for stand alone. i am just now obtaining the utility provided by anupam, thanks to all.

Virus Alert – MSIDENT.EXE

Msident.exe will appear in your Windows\System or System32 folder. You may see it described as "MS Security Update 993". In reality, this file installs with a yet to be classified member of the SDBot family of Trojans. We know this file will set itself to run on system startup. It may also download other unwanted programs, update it's own code, or allow a remote user to access your system. More information can be found at http://www.symantec.com/security_res...051312-3628-99.

We'd recommend removing this file using WinPatrol. First, kill it under your Active Tasks then remove it from your Startup Programs. If running WinPatrol 8.x or later; right click the file then select "Delete file on Reboot". Finally, reboot your system.

Virus
Remove

[joeguru]

Some malware/virus programs can't be removed when they are active. There is a program called Rkill. RKill is a console program that attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections. I find this program very useful for very difficult malware.

[placou 1968]

upon running the bluescreen utility, it says 0 crashs. im pretty sure i ran utility correctly, it seems strait forward. i read attached info and done as ask, (i think). i have not been able to get computer to repeat bsod, i guess i,ll wait to see if msident has any bearing on issue.

i will try rkill, as i currently am not able to remove the findings by winpatrol, i appreciate the help

[placou 1968]

of all entries this is the only one highlited after opening mini dump. this is from a new bsod using admin. side just prior to this post

ntkrnlpa.exe ntkrnlpa.exe+23aa63 0x81e33000 0x821ed000 0x003ba000 0x51da1840 7/7/2013 8:39:12 PM Microsoft® Windows® Operating System NT Kernel & System 6.0.6002.18881 (vistasp2_gdr.130707-1535) Microsoft Corporation C:\Windows\system32\ntkrnlpa.exe

[Anupam]

Are you sure there were no other entries besides ntkrnlpa.exe?

ntkrnlpa.exe is a system file, and unless it's corrupt, I don't think it's the one causing the blue screens. Most likely it's a third party driver that is causing the blue screen.

You can zip the two minidump files, and upload it to a file sharing site, like Box, Dropbox, FileDropper, or Senduit, and share the link here. We can take a look.

msident.exe looks like a rogue file. Run scans with MBAM and MSE.

[Remah]

I agree with Anupam. Windows components are often implicated in problems because they are the executive systems supervising other processes.

I suggest looking at Mark Russinovitch's Sysinternals tools - there's a cloud version Sysinternals Live. Somewhere in Technet there's an example he posted, probably on his blog.

I'm not sure if someone hasn't already mentioned dedoimedo's useful guide on BSOD