Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Freeware Forum > General Computer Support

Reply
 
Thread Tools Display Modes
Old 06. Sep 2013, 02:47 AM   #1 (permalink)
Senior Member
 
Join Date: Oct 2011
Posts: 187
Default Blue screen, internal kernel

can someone help with this, i got blue screen i was about 5 seconds using hitman pro. in the admin side. ( i was running it for its updates) .the screen went blue and all i could read was "internal kernal .......if this is the first time you have seen this screen......... then it disappeared and i could not finish reading, i dont think anyone could read that fast, thanks in advance

problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.2
Locale ID: 1033

Additional information about the problem:
BCCode: 93
BCP1: 00003150
BCP2: 00000000
BCP3: 00000000
BCP4: 00000000
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\Mini090513-01.dmp
C:\Users\mom\AppData\Local\Temp\WER-66784-0.sysdata.xml
C:\Users\mom\AppData\Local\Temp\WERAF8F.tmp.versio n.txt
placou 1968 is offline   Reply With Quote
Old 06. Sep 2013, 03:15 AM   #2 (permalink)
Senior Member
 
Join Date: Jul 2010
Location: New Zealand
Posts: 1,741
Default

What sort of help do you want?

Here's Microsoft's general advice on the topic of BSOD:
http://windows.microsoft.com/en-US/w...s-in-Windows-7

I'd normally just restart and check that the system is OK: disk check, memory check, Windows SFC.

It usually doesn't happen again so the first question is: Is it reproducible ? If you can't reproduce it then you probably don't have an ongoing problem.

If you can reproduce it then sending the dump to Hitman and then Microsoft are possible options.

You're also running Vista so I'd lean towards upgrading if you can't get rid of the problem.

This is what Microsoft says about BCCode 93:
http://msdn.microsoft.com/en-us/libr...=vs.85%29.aspx
__________________
Better to light a candle ... than to curse the darkness.
Remah is offline   Reply With Quote
Old 06. Sep 2013, 04:43 AM   #3 (permalink)
Senior Member
 
Join Date: Oct 2011
Posts: 187
Default

i just went into event viewer and in systems, i found ERROR that the previous system shutdown was unexpected, and a warning, kernal module had suddenly lost power. i was only inquiring because i have never seen it ( the blue screen ) i have never read anything good about getting one, i guess i was seeking a translation of the posting, thanks for the links, the latter of the 2 will apply, thanks again.

Last edited by placou 1968; 06. Sep 2013 at 04:52 AM.
placou 1968 is offline   Reply With Quote
Old 06. Sep 2013, 11:23 AM   #4 (permalink)
Super Moderator
 
Anupam's Avatar
 
Join Date: Jul 2008
Location: India
Posts: 15,277
Default

It might have been a temporary issue, most likely because of Hitman Pro, for whatever reasons.

Download BlueScreenView from here:

http://www.nirsoft.net/utils/blue_screen_view.html

It's a great little program from Nirsoft. Run the program, and open the Minidump file from

C:\Windows\Minidump\Mini090513-01.dmp

The program will highlight the source of the problem as shown in the image on the product page.

Post the highlighted filename here.
__________________
Anupam
Anupam is offline   Reply With Quote
Old 07. Sep 2013, 01:43 AM   #5 (permalink)
Senior Member
 
Join Date: Oct 2011
Posts: 187
Default

i located this, could this cause the above mentioned blue screen ? even though i read the info provided about virus alert, im uncertain about removal, any words of wisdom would be appreciated, i use mse, hitman, mbam, ccleaner, kaspersky root kit removal tool and winpatrol +, nothing catching "msident" i just happen to see it under active x, all but mse are set for stand alone. i am just now obtaining the utility provided by anupam, thanks to all.

Virus Alert – MSIDENT.EXE

Msident.exe will appear in your Windows\System or System32 folder. You may see it described as "MS Security Update 993". In reality, this file installs with a yet to be classified member of the SDBot family of Trojans. We know this file will set itself to run on system startup. It may also download other unwanted programs, update it's own code, or allow a remote user to access your system. More information can be found at http://www.symantec.com/security_res...051312-3628-99.

We'd recommend removing this file using WinPatrol. First, kill it under your Active Tasks then remove it from your Startup Programs. If running WinPatrol 8.x or later; right click the file then select "Delete file on Reboot". Finally, reboot your system.

Virus
Remove
placou 1968 is offline   Reply With Quote
Old 07. Sep 2013, 02:26 AM   #6 (permalink)
Senior Member
 
joeguru's Avatar
 
Join Date: Feb 2013
Location: USA
Posts: 311
Default

Some malware/virus programs can't be removed when they are active. There is a program called Rkill. RKill is a console program that attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections. I find this program very useful for very difficult malware.
__________________
To err is human, to blame it on a computer is even more so.
joeguru is offline   Reply With Quote
Old 07. Sep 2013, 02:28 AM   #7 (permalink)
Senior Member
 
Join Date: Oct 2011
Posts: 187
Default

upon running the bluescreen utility, it says 0 crashs. im pretty sure i ran utility correctly, it seems strait forward. i read attached info and done as ask, (i think). i have not been able to get computer to repeat bsod, i guess i,ll wait to see if msident has any bearing on issue.

i will try rkill, as i currently am not able to remove the findings by winpatrol, i appreciate the help

Last edited by placou 1968; 07. Sep 2013 at 02:33 AM.
placou 1968 is offline   Reply With Quote
Old 07. Sep 2013, 04:20 AM   #8 (permalink)
Senior Member
 
Join Date: Oct 2011
Posts: 187
Default

of all entries this is the only one highlited after opening mini dump. this is from a new bsod using admin. side just prior to this post

ntkrnlpa.exe ntkrnlpa.exe+23aa63 0x81e33000 0x821ed000 0x003ba000 0x51da1840 7/7/2013 8:39:12 PM Microsoft® Windows® Operating System NT Kernel & System 6.0.6002.18881 (vistasp2_gdr.130707-1535) Microsoft Corporation C:\Windows\system32\ntkrnlpa.exe

Last edited by placou 1968; 07. Sep 2013 at 04:52 AM. Reason: understood request
placou 1968 is offline   Reply With Quote
Old 07. Sep 2013, 07:43 AM   #9 (permalink)
Super Moderator
 
Anupam's Avatar
 
Join Date: Jul 2008
Location: India
Posts: 15,277
Default

Are you sure there were no other entries besides ntkrnlpa.exe?

ntkrnlpa.exe is a system file, and unless it's corrupt, I don't think it's the one causing the blue screens. Most likely it's a third party driver that is causing the blue screen.

You can zip the two minidump files, and upload it to a file sharing site, like Box, Dropbox, FileDropper, or Senduit, and share the link here. We can take a look.

msident.exe looks like a rogue file. Run scans with MBAM and MSE.
__________________
Anupam
Anupam is offline   Reply With Quote
Old 07. Sep 2013, 12:30 PM   #10 (permalink)
Senior Member
 
Join Date: Jul 2010
Location: New Zealand
Posts: 1,741
Default

I agree with Anupam. Windows components are often implicated in problems because they are the executive systems supervising other processes.

I suggest looking at Mark Russinovitch's Sysinternals tools - there's a cloud version Sysinternals Live. Somewhere in Technet there's an example he posted, probably on his blog.

I'm not sure if someone hasn't already mentioned dedoimedo's useful guide on BSOD
__________________
Better to light a candle ... than to curse the darkness.
Remah is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 09:52 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2019, vBulletin Solutions, Inc.