Help - BSOD - Blue Screen Of Death

[scarletjim]

Really I'm calling for help from M.Mark, but if anyone else can help then please do...

Over the last few days, my desktop has started to crashed regularly. It presents me with the BSOD, along with a page of error messages and details.

At the start it says something like Kernal-Stack-Inpage or something like that. Towards the bottom there are some error codes:

(0x00000077, 0xC00000B5, 0xC00000B5, 0x00000000, 0x019CF000)

I've googled various bits and pieces of the above, and haven't found any real solutions, just lots of guesses requiring risky actions that might just make things worse...

I use AVG for anti virus, and Spybot and Ad-Aware, and keep them all up to date. When I try to run AVG in the last few days, it gets to a certain stage and then crashes, so that's no help.

The only time I have noticed it so far is when I opened Limewire, and when AVG is running it gets stuck for ages on the Limewire Incomplete folder, so I suspect that may be the problem. However if I try to delete the contents of that folder using explorer, the PC locks up as soon as I open the folder. I've just tried for a third time to delete these files and it stops at one in particular and says 'cannot delete - the path is too deep'.

Have tried system restore, made no difference, and have tried running the virus software in safe mode, it worked to the end but didn't find anything. I haven't added any hardware or software recently (well, not to my knowledge!) and I'v not done anything to my drivers.

Is anyone sufficiently expert to help, but able to explain any help simply enough for a complete non-IT person to understand?

PS In case anyone is wondering, I'm resorting to the emergency laptop for the rest of the week.

[Flyman]

Jim: I don't think the 'path too deep' issue will be causing the crashes, but if it is interfering with AVG's scans then you may as well try and sort it.

The problem is caused by a file having too many characters in its name.
The solution is to shorten it.
As it is uneditable itself (because it is too long) the answer is to edit the names of the folder(s) containing it.
E.g.: If it is currently sitting in a folder called 'Incomplete Downloads' then go to that folder and find the file(s) responsible. Do this by trying to edit the file name. The dodgy ones won't be editable. Note which they are.
Then return to the holding folder and rename it, 'IncDLs' or even, temporarily, 'I' - anything, just so long as it is short!
Now, return to the suspect files.
As their file path is now x-number of digits shorter, hopefully you'll now be able to delete them.
If not, edit the next folder 'up', possibly 'My Music' to 'M' and try to delete again.
Then, if you want, rename your folder(s) as before or redirect Limewire to send d/led files to 'I' or other.

Now, update AVG and try a full scan again.
Hope that helps & good luck.

[spoogehead]

The Microsoft site has possible explanations for this error code http://support.microsoft.com/default.as ... us;Q315266

but the codes you have don't quite tally up to a definitive answer. Some questions to answer that may help:

Are the blue screen error codes exactly the same each time?

Do the blue screens occur onlywhen you're using Limewire or have they ever occurred at any other time?

Have you updated (perhaps unkowingly) to a newer version of Limewire?

As this could be a software / spyware / virus or hardware problem, better to eliminate software first. Get AVG to do a boot-up scan of your drive, ie it does a scan before Windows even starts and see if that comes up clean.

Hardware reasons could be faulty memory or hard drive, hence eliminate software first!

[Marquee_Mark]

Have you tried deleting the Limewire Incomplete folder itself, rather than entering it and deleting individual files? The folder will regenerate itself - or you can create a new one yourself after.

If this still causes a crash, try renaming the folder then deleting, or deleting in Safe Mode.

Or uninstalling Limewire then, if the folder still exists deleting it. You won't lose your completed Limewire downloads.

Other than that, it's a case of eliminating what's been mentioned by Flyman & Spooge - in particular noting whether this crash occurs only on Limewire.

With more info it'll be easier to isolate.

[Flyman]

IIrc, when I had this problem a few years back I wasn't able to delete the whole 'Incomplete' folder, or the overlong titled files themselves because the fact that their titles were too long made them 'untouchable'.
Hence the need to alter (shorten) the path name via the folders, not the file.

If you're not bothered about saving any of the 'Incomplete' files then try just renaming the holding folder to something short, as I suggest above, and then delete it.
As Marquee_Mark says, the 'Incomplete Downloads' folder will recreate itself next time you use Limewire if you delete it now, so when you get straightened out with this issue don't forget, when you next open Limewire, to re-name it, then go to options/configure in Limewire and instruct it to 'Send' files to your (short) renamed file to avoid this problem recurring.

[Marquee_Mark]

Been checking back on this thread for responses throughout the day, and after a few crisp, refreshing & tasty - yet ultimately fattening & liver wasting Magners, something that's been bugging me has gotten too much to bear.

What does 'llrc' mean Flyman?

[Flyman]

'If I recall correctly', M_M.

[Marquee_Mark]

ahhhh.

ahhhhhh.

I read it as all lower case L L R C

I thought you'd either started a post off, then altered it and left some letters undeleted.

OR

You were throwing in a few abbreviated letters - which proved the case.

I shall now sleep soundly tonight, or rather - isnsst.

[scarletjim]

Many thanks for the tips fellas - I will work through them this evening, and feed back (providing any additional info requested if the problem is not solved).

[DixieDean]

The other thing you could try is to stop using Limewire to download dodgy porn...

[scarletjim]

The other thing you could try is to stop using Limewire to download dodgy porn...

There are more than enough places on the web to get porn without having to download it from a P2P - personally I use Timekiller for that and a lot of other entertainment and laughs.

[scarletjim]

Ok, as requested, a bit more information. I think this answers the various questions above but if not then please ask for more!

1. I can't rename the 'Incomplete' folder - as soon as I try to access it, either right or left click, the system freezes and evntually BSODs. Othr folders around it do not have the same problem.

2. The error codes are not always exactly the same, they are normally what I posted above, but sometimes vary. Just now I had 0x0000007A, (0xE23F46C0, 0xC00000B5, 0xBF8CF04E, 0x10078860) for example, completely different to previous messages. That message also had an unusual pice of additional text: win32k.sys - Address base BF8CF04E at BF800000, Datestamp 45F013F6

3.The problem does not seem to affect my access to internet, it only comes up when I try to access the Limewire folder (no problem - I could just ignore this folder) and also when I try to run AVG (a major problem - I dont want to be without AVG protection, and I would prefer to continue to use this anti-virus package if I can).

4. As far as I'm aware, I was not using a newer version of Limewire, can't be sure though as I have uninstalled it now.

5. I have run AVG i safe mode and it gets to the end of the test without a problem, but it doesn't find anything.

6. I just tried trying to delete the 'Incomplete' folder while in Safe Mode, but still the system freezes as soon as I go anywhere near that folder, then closs down my explorer (no BSOD in Safe Mode though...)

A bit more additional info, may or may not be important - when I boot up after an error, I get the Microsoft box saying 'system has recovered from a serious error', and the details refer to 2 files:

C:\Documents\James\LOCAL~1\Temp\WER930c.dir00\Mini050407-02.dmp
C:\Documents\James\LOCAL~1\Temp\WER930c.dir00\sysdata.xml

I think these are the standard error dump messages, so may not be much help, but you never know...

Is there anything else anyone can suggest?

[Marquee_Mark]

Navigate to those files mentioned via Windows Explorer. You'll have to go to Tools > Folder Options > View and check Show Hidden Files.

Then delete em.

Just done a quick Google and others have had probs with those files, but about 5 different answers so far - all of em look wrong,

I'll look at the rest of your post while you try that

[scarletjim]

Navigate to those files mentioned via Windows Explorer. You'll have to go to Tools > Folder Options > View and check Show Hidden Files.

Then delete em.

Just done a quick Google and others have had probs with those files, but about 5 different answers so far - all of em look wrong,

I'll look at the rest of your post while you try that

Which files? If you mean the two ....WER... files that I mentioned above, I can't find them. I definitely have hidden files viewable, and I've gone into C:\Documents and Settings\James\My Documents\Local Settings\Temp, and there are some 'WER...' folders, but not the ones that always come up in my error messages. I can see folders WER1745.dir00 and WERbe68.dir00, and neither of them contain the files I am looking for.

[Marquee_Mark]

Ha. Dunno why I didn't think of this earlier. This is gonna sort it this is.

Download HijackThis from here (direct download link):

http://dw.com.com/redir?pid=10379544&me ... 79544.html

Unzip, then Run

Click "System Scan Only"

When the scan has finished (takes seconds) click Config at the bottom on the right, then click Misc Tools then select Delete File On Reboot.

Navigate to a file then click OK

When prompted to reboot your PC, click NO and then select the next file you wanna delete.

Repeat until necessary, then Reboot.

HiJackThis is a right mean piece of kit so should do the job.

If it doesn't I'll be shocked.

[Marquee_Mark]

Ignore my last post, just steam into the Limewire folder and teach it a lesson it'll never forget

[scarletjim]

Ignore my last post, just steam into the Limewire folder and teach it a lesson it'll never forget

Continue...

[Marquee_Mark]

I meant my post previous to the HiJackThis one.

Follow the HijackThis thread.

May the 4th be with you

[scarletjim]

HiJackThis only gives the option to delete files not folders - and apparently ( ) there are no files in the 'Incomplete' folder (bl00dy lying b*stard computers... )

Just tried something else, moved the 'Incomplete' folder into a dummy folder (can't believe it let me - it must have had its back turned briefly ), then tried to delete the dummy folder, but got the message:

Cannot delete Incomplete: The directory is not empty.



EDIT: I just asked for Properties for Incomplete folder:

The instruction at 0x50947ac9 referenced memory at 0x50947ac9. The required data was not placed into memory because of an I/O error status of 0x00000b5 - it's that f*cking B5 again!!!

[scarletjim]

Even in safe mode, and having put the offending folder into another dummy mother folder, when I try to delete that mother folder the system freezes then gives me a similar message to the one above...

[Marquee_Mark]

Bloody hell, what a pain!

Just come from a google result where this worked for someone:

http://ccollomb.free.fr/unlocker/

[scarletjim]

Bloody hell, what a pain!

Just come from a google result where this worked for someone:

http://ccollomb.free.fr/unlocker/

The plot thickens - have installed Unlocker but when I try to open it nothing happens. Literally nothing, the PC just carries on as if I hadn't tried to open it. Have we found the greatest virus ever???

[Marquee_Mark]

lol, i know what you mean - doesn't sound like a virus tho.

try the other 2 methods that my search returned & ignore the 3rd as you've tried it already

http://www.gnutellaforums.com/download- ... e-all.html

[Marquee_Mark]

Try this too.

http://winhlp.com/WxCannotDelete.htm

If you dunno how to open a command line, click Start > Run > Type in cmd and click Enter

I'll have a proper look tomorrow if you're still stuck.

If you end up following method 3, have a look out for Limewire processes to see if that's running - you should really be able to delete the folder if it's got no processes running off it

[scarletjim]

Out of interest, why do you say it doesn't sound like a virus?

Ok, enough computer work for me for one night, I'm off out drinking (more) in a minute, and don't expect to be back until Monday (going to Robbie Knox's birthday party in London tomorrow ) - I will continue with the advice on Monday.

By the way, anyone reading this, compare the posts on this thread against those on most forums on the net - I originally just came here to get the TFF password about 4 years ago - can't believe how helpful, interesting, friendly and mutually beneficial this forum is compared to most on the net.

[Lucky7s]

I know MM mentioned this earlier, but have you tried uninstalling Limewire making sure all references are gone?

[spoogehead]

Looking at the earlier post it seems that Limewire has been uninstalled:

4. As far as I'm aware, I was not using a newer version of Limewire, can't be sure though as I have uninstalled it now.

Although it sounds like elements of the Limewire folder are still there……

Something else you can try if other suggestions fail – boot into safe mode and then bring up the task manager (Cntrl+Alt+Del). Click the ‘Processes’ tab and have a look at what’s running, it should be along the lines of the following:

taskmgr.exe
explorer.exe
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
System
System Idle Process

These are all valid Windows processes. Keeping the Task Manager window open, try to delete the Incomplete folder again – if the system freezes as you described have a look in the Task Manager window and see if a different process has appeared and see if the CPU usage has shot up to 100% (that’s a common cause of system freezes). If this occurs, post back the name of the process and we’ll see if we can track it down.

Also do you have Windows automatic updates on? A recent update could be the problem especially as its only happened in the last few days?

[Marquee_Mark]

Out of interest, why do you say it doesn't sound like a virus?

It's just not virus activity. Viruses are either a lot more subtle, or a lot more devastating.

They'll sit on your system doing something like gathering info - which are the Trojans most people get. Or they'll just destroy it altogether - which would be some sort of vicious C# virus that deletes key files & .dlls but replicates their own form of them to 'pretend' they still exist until it's too late to sort.

It's generally quite difficult to actually SEE the viruses intentions in progress if you see what I mean.

They won't mess around with the problem you've got, which you've already identified as maybe being caused by these long filenames.

Also, AVG woulda flagged the virus anyway. I know you're not running full scans as it keeps freezing, but the general AVG virus guard woulda picked up a virus by now.

Even if these particular files that you're unable to delete ARE viruses, AVG woulda be bleating like a good un about it. Everything I've experienced with AVG points to this happening, and I doubt this case is an exception to the rule.

Altho obviously, never say never.

[Fuzzy Logic]

What about deleting the offending file/folder through DOS?

[Marquee_Mark]

Try this too.

http://winhlp.com/WxCannotDelete.htm

That link describes how to do it, altho Jim didn't mention if he'd tried it