Not starting up properly?

[xckel17]

BSOD problems

Is Windows 7 . . .
- x86 (32-bit) or x64 ?
32 bit
- the original installed OS on the system?
Yes
- an OEM or full retail version?
OEM

- What is the age of system (hardware)?
Around 10 months
- What is the age of OS installation (have you re-installed the OS?)
Around 10 months

My computer would restart by itself, then after restart, when i get to the desktop, it would say something about recovering from a problem, then if i look at the additional information, it would say
Problem Event Name: Blue Screen
or something like that please help.

 

[yowanvista]

   Information

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that caused BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads
You can use MagicDisc as an alternative.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {b28cf880, 2, 1, 82c4c8bc}

Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : ataport.SYS ( ataport!IdepFreeSenseBuffer+24 )

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: b28cf880, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c4c8bc, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82d76718
Unable to read MiSystemVaType memory at 82d56160
 b28cf880 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!memcpy+11c
82c4c8bc 89448ff0        mov     dword ptr [edi+ecx*4-10h],eax

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  807e2d9c -- (.trap 0xffffffff807e2d9c)
ErrCode = 00000002
eax=4f000000 ebx=85fc29c0 ecx=00000004 edx=00000002 esi=85fc1018 edi=b28cf880
eip=82c4c8bc esp=807e2e10 ebp=807e2e18 iopl=0         nv up ei ng nz ac pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010297
nt!memcpy+0x11c:
82c4c8bc 89448ff0        mov     dword ptr [edi+ecx*4-10h],eax ds:0023:b28cf880=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82c4c8bc to 82c547eb

STACK_TEXT:  
807e2d9c 82c4c8bc badb0d00 00000002 880a3d48 nt!KiTrap0E+0x2cf
807e2e18 83696a98 b28cf880 85fc1018 00000012 nt!memcpy+0x11c
807e2e30 8369f24c 852690e0 85e35008 85e35008 ataport!IdepFreeSenseBuffer+0x24
807e2ea8 8369f66b 852690e0 85e35008 8523a008 ataport!IdeProcessCompletedRequests+0x84
807e2efc 834a7894 8526909c 85269028 00000000 ataport!IdePortCompletionDpc+0xab
WARNING: Stack unwind information not available. Following frames may be wrong.
807e2f48 82c763b5 8526909c 85269028 00000000 sptd+0x11894
807e2fa4 82c76218 807c2120 8808fd48 00000000 nt!KiExecuteAllDpcs+0xf9
807e2ff4 82c759dc b5fbfb50 00000000 00000000 nt!KiRetireDpcList+0xd5
807e2ff8 b5fbfb50 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
82c759dc 00000000 0000001a 00d6850f bb830000 0xb5fbfb50


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ataport!IdepFreeSenseBuffer+24
83696a98 83c40c          add     esp,0Ch

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  ataport!IdepFreeSenseBuffer+24

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ataport

IMAGE_NAME:  ataport.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bbf16

FAILURE_BUCKET_ID:  0xA_ataport!IdepFreeSenseBuffer+24

BUCKET_ID:  0xA_ataport!IdepFreeSenseBuffer+24

Followup: MachineOwner
---------

 

[xckel17]

Hi, my pc has been experiencing problems recently, when i turn it on all i see is a black screen and my cursor even though the light on my cpu is on. I have to turn it off and on again for it to get to the desktop working. When i get the desktop to work, if i restart it, the same thing happens, all i see is a black screen and my cursor and i'd have to turn it off and on again, please help. I had asked for help in this forum yesterday, but it was because of BSOD problems, i had already followed all the instructions. But this has been happening even before i fixed the BSOD problems
heres the link of my post about BSOD problems, it might be able to help:
http://www.sevenforums.com/crashes-debugging/154484-bsod-problems.html

and i'm gonna attach my dump files and system health reports because it might be able to help. Please help, thank you
Also, if there are additional problems that i'm not seeing, can you please inform me thank you

 

[Maguscreed]

Daemon tools seems to be crashing your system.
You need to remove it.

 

[xckel17]

I already removed it yesterday

 

[Maguscreed]

well the driver for it is still loading according to the lastest dump file and the drivers loaded in it.
At this point botting safe mode and deleting windows/system32/drivers/sptd.sys

would probably be the easiest way to stop it from loading.

 

[xckel17]

well yowanvista gave me instructions

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that caused BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads
You can use MagicDisc as an alternative.

if i use the duplexsecure program, would that work instead of deleting the file itself?

 

[Maguscreed]

yes, that download will work as well.

 

[xckel17]

i'm confused, because there are two options, uninstall and install. which one should i use?

 

[Maguscreed]

you want to use it to uninstall the sptd.sys file.

 

[xckel17]

the thing is, if sptd.sys is uninstalled, the computer can't start properly, but if it is installed it does start up properly

 

[Maguscreed]

DuplexSecure - Downloads
daemon tools themselves recommend using that to remove it.

 

[xckel17]

BSOD and Blackhole exploit kit report by AVG

Is Windows 7 . . .
- x86 (32-bit) or x64 ?
32 bit
- the original installed OS on the system?
Yes
- an OEM or full retail version?
OEM

- What is the age of system (hardware)?
Around 11 months
- What is the age of OS installation (have you re-installed the OS?)
Around 11 months

My computer just went into the BSOD, i don't know what happened, but before the BSOD, avg reported a Blackhole exploit kit. What is a blackhole exploit kit exactly? Is it dangerous? Please Help!

 

[SledgeDG]

What is Blackhole exploit: Malware Intelligence Blog: Black Hole Exploits Kit. Another crimeware in addition to criminal supply. A division of MalwareIntelligence
http://community.websense.com/blogs/securitylabs/pages/black-hole-exploit-kit.aspx
http://www.symantec.com/connect/blogs/blackhole-theory

From the dump it looks like the crash was caused by AVG blocking/diverting the Exploit kit from accessing your RAM.
But to be sure you're "in the clean" you should get a second opinion: load this and run a full scan

Malwarebytes : Malwarebytes Anti-Malware is a free download that removes viruses and malware from your computer

when that comes up cleand, read/install this:

Learn how to install Windows 7 Service Pack 1 (SP1)

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 8c6a0030, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 82cdebb4, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 00000001, (reserved)

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82db9718
Unable to read MiSystemVaType memory at 82d99160
 8c6a0030 

FAULTING_IP: 
nt!MiAllocatePagedPoolPages+17c
82cdebb4 8b7830          mov     edi,dword ptr [eax+30h]

MM_INTERNAL_CODE:  1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  0

TRAP_FRAME:  b80ff9c4 -- (.trap 0xffffffffb80ff9c4)
ErrCode = 00000000
eax=8c6a0000 ebx=8c6abd38 ecx=82d99100 edx=00000000 esi=0000051e edi=0007c200
eip=82cdebb4 esp=b80ffa38 ebp=b80ffa64 iopl=0         nv up ei pl nz ac pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010216
nt!MiAllocatePagedPoolPages+0x17c:
82cdebb4 8b7830          mov     edi,dword ptr [eax+30h] ds:0023:8c6a0030=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82c975f8 to 82cd68e3

STACK_TEXT:  
b80ff9ac 82c975f8 00000000 8c6a0030 00000000 nt!MmAccessFault+0x106
b80ff9ac 82cdebb4 00000000 8c6a0030 00000000 nt!KiTrap0E+0xdc
b80ffa64 82d6f024 00000600 00000021 8c6abe00 nt!MiAllocatePagedPoolPages+0x17c
b80ffac8 82ce578f 00000021 0051e000 00000ff0 nt!MiAllocatePoolPages+0x1f
b80ffb20 82d70cd8 00000000 00000021 0051e000 nt!ExpAllocateBigPool+0xa6
b80ffb80 9287b868 00000021 0051d74c 35316847 nt!ExAllocatePoolWithTag+0x12d
b80ffb94 92859c37 0051d74c 35316847 00000000 win32k!Win32AllocPool+0x13
b80ffba8 9286db3e 0051d74c 35316847 b80ffc58 win32k!PALLOCMEM+0x18
b80ffbc4 92883047 0051d74c 00000005 00000001 win32k!AllocateObject+0x98
b80ffc24 92857a97 00001900 00000000 00000000 win32k!SURFMEM::bCreateDIB+0x261
b80ffc90 9285759d 00000000 00000006 01080030 win32k!hsurfCreateCompatibleSurface+0x2a8
b80ffd0c 9285762f ffb91008 00000640 00000346 win32k!GreCreateCompatibleBitmap+0x1cd
b80ffd20 82c9442a 4e010d76 00000640 00000346 win32k!NtGdiCreateCompatibleBitmap+0x19
b80ffd20 76f464f4 4e010d76 00000640 00000346 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0028eafc 00000000 00000000 00000000 00000000 0x76f464f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!Win32AllocPool+13
9287b868 5d              pop     ebp

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  win32k!Win32AllocPool+13

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc2a2

FAILURE_BUCKET_ID:  0x50_win32k!Win32AllocPool+13

BUCKET_ID:  0x50_win32k!Win32AllocPool+13

Followup: MachineOwner
---------

If your computer crashes again, make sure to zip up and upload the new crash dumps
http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

And if your Sims3 Launcher keeps crashing, delete the temp files under \Documents\Electronic Arts\The Sims 3: CASPartCache.package, compositorCache.package, scriptCache.package, simCompositorCache.package
and start TS3.exe directly

-DG