Re: Blue screen crashes

Gerry,

SSFS0BB8.SYS - does not exist on the machine after the uninstall of webroot.


I will follow your spyware suggestions after I do the verifier and chkdsk /r

Dominic

"Gerry" wrote:

Dominic

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793989.aspx

http://aumha.org/a/stop.htm

SSFS0BB8.SYS -This file concerns me as I cannot ascertain what it is
but it has often cropped up in HijackThis files where the user is
seeking to remove malware.

Can you locate the file in Windows Explorer and examine it's properties
by right clicking on the file. Instructions on how to Show hidden files
are in the next paragraph.

Go to Start, Control Panel, Folder Options, View, Advanced Settings and
verify that the box before "Show hidden files and folders" is checked
and "Hide protected operating system files " is unchecked. You may need
to scroll down to see the second item. You should also make certain that
the box before "Hide extensions for known file types" is not checked.
Next in Windows Explorer make sure View, Details is selected and then
select View, Choose Details and check before Name, Type, Total Size, and
Free Space.


What are your anti-virus and anti-spyware arrangements?
http://www.elephantboycomputers.com/page2.html#Removing_Malware

I do not think it is is worth pursuing other avenues of enquiry until
the situation regarding malware is clearer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
Gerry,

The last line of the minidump says
"Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2dd1 )"

Event Viewer
Date 12/18/07
Event Save Dump
Time 5:05:31
event id 1001

The computer has rebooted from a bugcheck. The bugcheck was:
0x0000007a (0x00000003, 0xc0000005, 0x0000005c, 0x00000000). A dump
was saved in: C:\WINDOWS\Minidump\Mini121807-01.dmp.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Does any of that help??

dominic

"Gerry" wrote:

Dominic

Something like this:

Stop 0x0000000E (0xc0000005, 0xB84B23E9, 0xB6A7894, 0xB5A786D0)

VETEFILE.SYS Address B84B23E9 Datestamp 468DE154

Examining dump files is a skilled art that few posting here are able
to undertake. Given your question I doubt you will be able to deduce
their meaning.

I suggest you also post copies of Reports from Event Viewer.

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear
in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after exiting
from Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Dominiccoombe wrote:
Hi Gerry,

Thanks for your reply.

Yes I have backed up important files. do that every night but will
make an extra copy now.

i already have the automatic restart turned off.

I am not sure what info you want off the blue screen.

The last one I had said:
"a process / crucial thread to the system has unexpectedly exited or
stopped"

Can I find a please to look at the dumps? will they help me?

Dominic
"Gerry" wrote:

Dominic

Have you backed up important data files?

Please post a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties,
Advanced, Start-Up and Recovery, System Failure and uncheck box
before Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

An alternative is to keep pressing the F8 key during Start-Up and
select option - Disable automatic restart on system failure.

If you are using a wireless keyboard and the F8 key does not work
substitute a wired keyboard and mouse for this exercise only.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Dominiccoombe wrote:
hi all,

my xp pro machine has progresses from crashing nearly every
program and having the odd unexplained reboot to now having blue
screen crashes.

I look at the blue screen but there is nothing that stands out as
a problem.

Usually blue screens are either drivers or hardware failure.

Could someone help me through this mess.

thanks

Dominic



.

Loading