symantec crashes windows

[whatever878787]

hey guys,

i have been using symantec AV enterprise edition for sometime now and recently when i launch a scan it gives me a blue screen of death on windows XP. i tried to capture the screen or at least pause it but my comp reboot instantly so all i know is that it crashes and reboot after 2 mins of scan... i haven added any programs or added any new hardware prior to the crash so i m pretty sure that it is not programs or hardware conflicts / issue...

i hope u guys would help me on this thanks

[nihil]

Hi, whatever878787 ,

Have you tried running it in safe mode? if it doesn't crash in safe mode then I would suspect a conflict with another application/service.

Then, please try scanning individual folders....................in particular, try something that does not change very often and does not contain any compressed files .

The first thing to do is update it, however, as every now and then AVs do have a "rogue update" that gets corrected next time round.

Please let me know the results :)

[tin.roof.rabbit]

What version of Symantec?

when v10 was released we noticed that it crashed XP. It was not all of the time, or every device, but there was a signification impact on our devices. Since we upgraded to the latest patches we've not seen the same issues.

Ciao

[the tree]

"when I run x, y crashes, therefore x has crashed y" is not valid logic. Run scandisk, MS antispyware and if needbe, hyjack this. There's all types of potential causes for this.

[nihil]

Both the two previous posts have something to add.

AVs do "get it wrong" from time to time, and you are more likely to see it with Norton than any other if only because Norton is by way and above the most common AV installation, so by definition, it must be exposed to the most varied environments? For this reason alone, it is important to keep your AV up to date, and I am talking about the application rather than its signature/pattern files.

There are numerous potential causes I agree, but I would suggest that starting with a run in safe mode where you have the minimum of background applications and services, is a good opening gambit.

Then try scanning something that shouldn't provoke a crash and see if it completes.

After that you can move on to other potential causes.

;)

[Ghost_25inf]

have you thought about turning off the automatic reboot. right click my computer, click properties, then click the advance tab, at the bottom of that box is startup and recovery button click that, and uncheck automatically restart. Now run the program and when you get the bsod it should stay up till you manually reboot.

[whatever878787]

first off thanks for replying so soon...

i m using symantec AV enterprise edition v10.1.0.394 and have been using quite sometime... that is the lastest file version i have...

i then scaned a folder and it went smoothly. i disabled the auto reboot and i manage to see what is that blue screen is all about... it says "BAD_POOL_HEADER" i then boot it to safemode and ran a full system scan as well as a quick scan and it doesnt give me any problems no blue screen no virus / malware nothing... it ran smoothly (is it an application conflict?)

i haven manage to run hijackthis... i will post it up here as soon as i run it

[whatever878787]

Logfile of HijackThis v1.99.1
Scan saved at 3:21:26 AM, on 7/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Notebook Hardware Control\nhc.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\SYMANT~1\vptray.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\No-IP\DUC20.exe
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Trillian\trillian.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Jakes Alarm Clock\Jakes Alarm Clock.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Azureus\Azureus.exe
C:\Documents and Settings\Whatever878787\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=laptop
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [NotebookHardwareControl] "C:\Program Files\Notebook Hardware Control\nhc.exe" -quiet
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\\vptray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MtdAcq] C:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.exe /s
O4 - Startup: No-IP DUC.lnk = C:\Program Files\No-IP\DUC20.exe
O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open Link Target in Firefox - file://C:\Documents and Settings\Whatever878787\Application Data\Mozilla\Firefox\Profiles\5xrhc8dv.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: View This Page in Firefox - file://C:\Documents and Settings\Whatever878787\Application Data\Mozilla\Firefox\Profiles\5xrhc8dv.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14C1B87C-3342-445F-9B5E-365FF330A3AC} (Hewlett-Packard Online Support Services) - http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1141705748296
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1146083908265
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[nihil]

Thanks for the feedback,

Yes, it now sounds like we have narrowed it down to two things.

1. An application conflict...................this could be spyware/adware or just another wanted application that is trying to use resources before something else has finished with it.

2. A file that has become corrupted in some way and is "confusing" your Norton scan. This is not likely, as it ran both scans in safe mode, which almost certainly means applications conflict. Otherwise it is a temporary file that only gets created when a particular application is running.

I would be inclined to get:

1. Ad-Aware
2. Spybot Search and Destroy
3. A-Squared
4. EWIDO

Update them, reboot into safe mode and run them.

Then run an online scanner such as PC-Cillin's "Housecall" and/or The Panda Software online scanner.

What hardware do you have? I am interested in the processor and RAM.

I suppose you should really run CHKDSK and defrag first, just to get that out of the equation.



:)

[muert0]

Try turning off microsoft indexing service and see if the problem stops.
You can do this by clicking the start button, select "Run", then type "msconfig", then select the "Services" TAB, scroll down to the Indexing Service and Switch it off.
See if it helps if it doesn't turn it back on.
I'd be calling Symantec if I were you.

[whatever878787]

sorry for the late reply... was kinda busy last few days

a-square: no malware found after a complete system scan
Ad-Aware: 6 tracking cookie (no threat at all)
Spybot: no threats found
Indexing has been turned off and it still has the same problem

[nihil]

Well, it works in safe mode?

The "pool header" message generally refers to a driver file problem. I would make sure that they are all up to date. Remember that a lot of them won't load in safe mode, you are just using Win XP generic drivers.

Also, I see that you have SP2 and Zone Alarm. Please make sure that you are only running one firewall and interactive AV at any one time.

Also if you are running Norton's "Go Back" try turning that off before you scan.

Actually, your problem isn't that bad, as you should be running your AV in safe mode anyway ;)

[whatever878787]

oh nihil btw forgot to say this on the last post... i have a amd 64 processor and a 1.25G of ram so i dont think it is resources issue

i dont have norton go back program... all i have in my possession (with symantec) is that AV
i m only running zone alarm no windows firewall (i believe there is a button in zonealarm that disables windows firewall

well i have not added any new hardware prior to the problem so is it still possible that it is a driver issue?

[morganlefay]

I just recently had a machine with a conflict between ZA and Avast AV.....the machine would BSOD.

Removed ZA...all fixed.

MLF

[Zorolord]

Well WE87

Does your AV update itself - If so it may have been a update that is crashing your system if not, follow the posts of Nihil has stated make sure your the AV Engine as well as the signatures/definition are updated! No point running AV's if you don't keep it upto date!

I would also be inclined to update the graphic card driver (make sure you follow Nihil advise first before messing on with driver updates) I had similar problems not with AV's of system just crashing all of sudden without changes occuring to the registry or system!

As well as corruption of files, it could be a hardware fault!

There is known issue with ZA and Avast AV, it actually warns you when you install ZA after Avast so I doubt it ZA causing the problem!

Good luck anyhow

ZL

[nihil]

Hi, whatever878787 when I mentioned a "resources issue" I was not thinking of a lack of them, but of a conflict. Some programs and services want to use specific resources such as memory address blocks................if a prior app/service hasn't released them you could well have a system hangup or a BSOD.

Morgana~ has a good point, as does Zorolord . Try booting your machine, but DO NOT connect it to the internet!

Turn off Zone Alarm, then try your scan. Obviously, when you boot into safe mode, ZA doesn't start.

I see that you have an ATi graphics card.............their drivers are notorious for conflicts and instability, so you might check that you have the latest version.

I would also comment that of all the AVs, Norton is the one that I have had most problems with having conflicts with other applications.

You might try AVG and switch Norton off. See if it produces the same BSOD?

Good luck!

[Und3ertak3r]

2 Things:

1/ Why is it that one of the most useful tools for fault finding in win2k and XP is always overlooked-
The Event Viewer: You can export (Save) the file (System and Application) for another at analyse.
the information thatis held here - which just happens to contain the information in the BSOD.. the CODES that come with the Message "BAD_POOL_HEADER" these can help more.. you can do a search of the Symantic web site to find if this issue has been encountered before..

2/ Why not use MSCONFIG to disable som eof the startup progs and services to eliminate possable causes..no need to uninstall things

[whatever878787]

ATI driver up to date
Ran AVG but it says that it cannot open C drive.. uninstalled reinstalled still the same (and i reboot everytime i uninstall/install AVG)

i tried event viewer but it doesnt say whats the problem... all i can see is it the startup event no shutdown or error event there

[nihil]

Hmmmm,

Will AVG run in safe mode?

What else does the "pool header" BSOD say? there should be some numbers?

[whatever878787]

avg run in safe mode

nihil: is these the numbers that u r refering? (0x00000019, 0x00000020, 0x86913ae0, 0x86913ed0, 0x0a7e0001)

[morganlefay]

Usually there is a stop error, lots of numbers and a file name

EG

STOP_ERROR_OF_BSOD

0x00000000 ( 0x00000000, 0x00000000, 0x000000000, 0x0000000000)

filename.ext

Easier if we had all the info.......als

http://en.wikipedia.org/wiki/Blue_screen_of_death

On the right you will see the various blue screens for windows....

MLF

[whatever878787]

BAD_POOL_HEADER

0x00000019 (0x00000020, 0x86913ae0, 0x86913ed0, 0x0a7e0001)

it doesnt specify any file name

[morganlefay]

Faulty driver

Windows XP Service Pack 2 is usually a good thing. However, it's not without it's problems. Most notably is it's crashing of more 'sloppily' written drivers. If you're now experiencing the BAD_POOL_HEADER Blue Screen Of Death on bootup and have a NetGear wireless network card in your machine, then remove it. More than likely this will allow you to boot. I've also heard of some LinkSys wireless network cards causing this same error as well. As of the writing of this article, there are no new drivers from either LinkSys or NetGear. I've also been unable to find any support on their site about the issue. If your NetGear card uses the Atheros chipset, then you may be able to use those drivers to get back up and running.

from a quick scan looks like it has to do with older NIC drivers....

http://www.google.ca/search?hl=en&q=BAD_POOL_HEADER+0x00000019&meta=

MLF

[whatever878787]

i dont have any netgear equipment onboard and i have up to date NIC drivers and i haven installed any new hardware / upgrade driver prior to the problem

so i guess either i could look for the faulty equipment driver or reformat it (its about time to reformat it again anyway)

[whatever878787]

btw i have a broadcom wireless nic card and a realtek 10/100Mbps card (came with OEM)

[morganlefay]

try and update your nic driver.......maybe all your drivers

if it doesnt crash in safe mode....it usually is a driver\application issue

MLF

[whatever878787]

yeah thanks for the advice MLF i would try to do that

[nihil]

One other possibility,

I notice that you have some HP stuff?

I have heard of problems with HP drivers and XP SP2. You might go to the HP website and get the latest drivers for whatever you have.

If that doesn't work straight off, please try uninstalling and reinstalling the device(s) with the new drivers.

;)

[whatever878787]

yeah i have gotten all latest OEM Drivers.. i tried the ones in MS's updates site but it messes up my system so i stick with HP's drivers.

but yeah i will try to reinstall the drivers later

[morganlefay]

Personally...I never use MSes drivers....ever

unless its some MS product.

I always use the manufacturers site...or the machines OEM drivers...(dell\hp etc)...and they are pretty good at releasing new drivers when a MS patch breaks them :D

MLF

[whatever878787]

yeah i found out the hardway... i thought there was some fault in my hardware and a few sessions with HP (useless support group) they screw around my system and i need to reformat it 5 times so later i decided not to install MS drivers and it was fixed ahha

[VanEck]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=275973#post908448) by whatever878787
ATI driver up to date
Ran AVG but it says that it cannot open C drive.. uninstalled reinstalled still the same (and i reboot everytime i uninstall/install AVG)

i tried event viewer but it doesnt say whats the problem... all i can see is it the startup event no shutdown or error event there

Honestly, I am not even sure this sounds like a software problem to me... it very well be a hardware problem, IE: a failing Hard Drive or power supply.

I would check the most basic things first, such as using a volt meter on your power supply and make sure it is getting proper voltage.

Next step would be to verify that your Hard Drive is not dying a slow and painful death.

Running Memtest couldn't hurt either.

[whatever878787]

vaneck... thanks for the advice... the 'box' that i m using now is a laptop... is there a way to test the powersupply? and how can i see if the hdd is dying?

going to run memtest when i get back

[nihil]

Hmmm,

I don't think that your problem is/was hardware related, as that message is generally associated with firmware (driver) problems.

There are two basic ways of testing the power supply.

1. Physically testing the outputs with a multimeter.
2. Using some sort of "PC Health" type software that monitors inputs to the MoBo.

To check your HDD go to the manufacturer's site and download their diagnostic software.

:)