Question

Blue Screen when connecting to internet

Asked by: ms3930

Running Win2K, sp4. Boots properly, but as soon as I plug in the DSL cable, I get the BSOD, and it reboots. The reboot is too fast for me to get much info from the blue sreen. The PC works fine as long as it is not connected to internet. Running on Thinkpad 390x. I've been using this internet connection for 6 months, and this never happened.

Error in Event Log says: Event ID = 1000. Source = PerfDisk.

After this started happening, I scanned with AVG 8.0, and found several viruses. Among them are: Trojan SHeur.BMZO and Trojan Proxy.YRL

Thanks for your help

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2008-07-22 at 23:38:06ID23587540
Tags

microsoft

,

windows 2000

,

sp4

,

blue screen when connecting to internet

Topics

Windows 2000 Operating System

,

Security Utilities

,

Avast Anti-Virus Software

Participating Experts
5
Points
500
Comments
24

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. AVG Finds: Trojan horse Downloader.Generic3.OAE
    AVG 7.5 running under Win XP finds: Trojan horse Downloader.Generic3.OAE I'm not sure if AVG can heal this as I can find no real info on what it actually is. Any help would be appreciated.
  2. Trojan horse BackDoor.Generic7.QQK virus - AVG del…
    AVG 7.5 keeps deleting a Trojan horse BackDoor.Generic7.QQK virus, file: c:\windows\temp\startdrv.exe. On reboot it comes back, and AVG deletes it again. I've run a full scan with SuperAntiSpyware. It found and corrected a bunch of items, including 2 trojan download files. Ho...
  3. Problems with Blue Screen of Death error messages when …
    I am having problems with Blue Screen of Death error messages when running my AVG anti-virus software. My computer is running XP Pro and I have the latest version of AVG 7.5.503. Whenever I start AVG, after about 20/30 minutes I get BSOD error message Bugcode_USB Driver. I ha...
  4. virus and trojan removal
    Hello, I'm running windows xp sp2 and internet explorer 6. Have recently been infected with several virus / trojan malware. Several to list but some of them were: generic3, generic6, zlob, and vundo. Researched the internet and followed some advice found there. So far I have ...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: NivleshPosted on 2008-07-22 at 23:58:49ID: 22066615

Hi.

I dont remember windows 2000 very much since been using XP for a while now. But if you right click on My Computer and select Properties.Under the Advanced tab, you should see Startup and Recovery and if you cick on settings, one of the tick boxes in this screen should allow you to stop your computer from automatically rebooting on a system failure.

Once you have done the above, try connecting the DSL cable and record and post the error you get when it does a BSOD.

I would also suggest downloading and running superantispyware from www.superantispyware.com. This will clean alot of your malware/spyware

 

by: ms3930Posted on 2008-07-23 at 00:21:55ID: 22066721

I disabled the rebooting, and got the following on the blue screen:
STOP: 0x0000001E, (0xC000005, 0x00000000, 0x00000000, 0x00000000)
KMODE_EXCEPTION_NOT_HANDLED

 

by: philippe7v7Posted on 2008-07-23 at 00:31:45ID: 22066770

Hi,

At this point, I could presume that your OS may be corrupted either because of the virus/worm infections or a previous installed application.  I would like to suggest that you try to use Tune-Up to ensure that your system is free from usual application problems/errors.  It is free for 30 days so I guess a one-time use wouldn't hurt.  This is just to isolate the problem. Maybe you can use another PC with Internet to download it from http://www.tune-up.com/download

 

by: ms3930Posted on 2008-07-23 at 00:40:01ID: 22066815

I am using another PC to communicate, and will try downloading & using Tune-Up.

 

by: ms3930Posted on 2008-07-23 at 01:33:29ID: 22067082

I ran SuperAntiSpyware, and it found and quarantined the following:

1. Rootkit.Unclassified/SysDamp-Traces (2 items in Registry)
2. Trojan.Unclassified/CRU629

I also ran Tune-Up's Disk Doctor, and it found nothing. Are there other Tune-Up tests I should run?

Mitch

 

by: sbafna74Posted on 2008-07-23 at 01:42:36ID: 22067140

you can try this 2 methods

first
switch off your dsl modem and connect it to your pc i assume you connect via Ethernet card and then switch on the dsl modem if you get the blue screen by just switching on the modem then it must be your Ethernet card is making some problem with the OS and the os gets restarted if it is a pci Ehternet card try to install and reinstall the driver if not solved try to replace with another card if the problem still continues then the second method

second(Recommanded)
take your data backup and reinstall your OS it is easiest and fastest solution

 

by: ms3930Posted on 2008-07-23 at 01:57:32ID: 22067220

sbafna74,
Here are the details of my setup:
1. Using laptop with D-Link "wired" adapoer plugged into the PCMCIA slot
2. I don't have a modem...I'm using a hard-wired network run by the apartments I live in. I run a cat-5 cable from the wall into the D-Link adaptor.
3. I'm wondering if either of the viruses I listed above is a factorof
4. For awhile, before the BSODs started, I was getting a series "You are leaving a secure...etc" messages, sometimes 6 in a row. I got these even before I visited any websites.

 

by: philippe7v7Posted on 2008-07-23 at 03:42:30ID: 22067701

For Tune-Up, please use One Click Maintentance.  If you cant find it from the Tune-Up menu, it is in Program Files - Tune-Up Utilities 2008 - Utilities

You may need to rerun One Click Maintenance two or three time to remove most registry and application errors.  If it doesn't fix your problem, at least we were able to isolate further.

 

by: philippe7v7Posted on 2008-07-23 at 03:51:18ID: 22067742

Just to note also, if Tune-Up's One Click Maintenance doesn't your problems, it should at least speed up a little your PC.  Also, it is now more likely of the viruses found.

You may have to use a different Anti-Virus software that can check your PC when booted to DOS or via CD ROM.  Or cascade your hard disk in another PC and have the anti-virus software of the PC check your hard disk.  This way, the virus is not running and can be removed.

If it's a rootkit problem, you have to download anti-rootkit software to clean up your PC.  Sophos, Symantec have free anti-rootkit software I think.  Or I can email it to you --- send me an email philippe7v7 at y a h o o DOT c o m.

You can also use Spybot's Search and Destroy software (one of the best antispyware without spyware) - http://www.safer-networking.org

 

by: NivleshPosted on 2008-07-23 at 04:15:26ID: 22067871

Hi

Your computer is definetly infected. SuperAntispyware is quite good at removing malware/spyware. I recommend coupling it with AVG which is free from free.grisoft.com Make sure you update it. The virus/malware might have infected some system files and more importantly your tcpstack and your network drivers and this must be causing the BSOD because as soon as you get onto the internet, your computer starts using them and hey presto!!

 

by: ms3930Posted on 2008-07-23 at 08:19:20ID: 22070197

Good Morning, Experts,

I'm back on it again, and will be trying your solutions. I'm afraid staying up until 5:00 am did me in, and I am getting a late start today.


Mitch

 

by: ms3930Posted on 2008-07-23 at 13:28:32ID: 22073502

Well, I've finished running the tests, and here are the results:

1. Ran Sophos AntiR%ootkit. It found an unknown hidden file (Rifu48.sys), but recommended NOT to clean it.
2. Ran SuperAntiSpyware again, and it found nothing
3. Ran Tune-Up, and it found things that didn't appear to be related to the problem The Registry was clean.
4. Re-ran AVG 8.0 and found nothing (after 4 hours)

I'm thinking it might be the wired adaptor causing the porblem (as sbafna74 suggested). I'm going to get a replacement, and see if it helps.

 

by: ms3930Posted on 2008-07-23 at 18:06:54ID: 22075412

FOLLOW-UP INFO:

To test whether the problem is with my wired adaptor, I set up a wireless network, and connected to the internet w/o using the adaptor. It produced the BSOD just like it did with the adaptor.

I believe I've removed all viruses & malware, but it still is not working.

NIVLESH: You said that the tcpstack & network drivers might be infected. How would you suggest I proceed?

 

by: smartechsupportPosted on 2008-07-23 at 19:16:18ID: 22075650

If you have the restore disc or OS disc, I would strongly recommend reinstalling the OS. It will allow you to have a fresh, clean start. And... be sure to install FREE AV (Avast) and Firewall protection also FREE (PC Tools Fire Plus) before connecting to the Internet.

If restore or OS discs not available and you don't want to spend money, consider installing Linux, specifically Kubuntu.

Avast: http://www.avast.com/eng/download-avast-home.html

PC Tools FW Plus: http://www.pctools.com/firewall/

Kubuntu: http://www.kubuntu.org/getkubuntu

Good luck

 

by: sbafna74Posted on 2008-07-24 at 10:36:29ID: 22081567

Dear ms3930 AS I HAVE RECOMMENDED EARLIER ALSO TAKE THE BACKUP OF C DRIVE IF YOU HAVE ANY DATA ON THAT AND FORMAT THE DRIVE AND REINSTALL THE OS AGAIN AS THAT IS THE EASIEST AND FASTEST WAY TO GET BACK ON TO WORK AS IT WILL TAKE HARDLY 1 HOUR TO GET YOUR PC READY

 

by: NivleshPosted on 2008-07-27 at 00:56:31ID: 22097605

Hi there

Here is an article from MS as to how to reset your tcp stack http://support.microsoft.com/default.aspx?scid=kb;en-us;q299357

 

by: NivleshPosted on 2008-07-27 at 00:58:27ID: 22097609

Hi

You did not post the error you get when your system does a BSOD. Can you please post that

 

by: mtz1of4Posted on 2008-07-27 at 07:27:28ID: 22098571

I'm just going to jump in here and comment that you might want to consider either adding a Router to your Apartments Network or anyone in the net work can sniff your traffic, possibly infect you with viruses they have. Or at the very least use a software firewall that prevents Incoming traffic from others on your network.  Once you get this sorted out,  of course.

 

by: ms3930Posted on 2008-07-28 at 00:28:36ID: 22101204

Hi Experts,

Regarding the error messages I'v been getting, I've consolidated them below:

1. As soon as I connect the Internet cable to my machine, I get the BSOD. I don't even have to open IE or open a web page.

2. The message on the BSOD is:

STOP: 0x0000001e: (0xC000005,0x00000000,0x00000000,0x00000000)

KMODE_EXCEPTION_NOT HANDLED

3. The Event Log shows: Event ID = 1000. Source = PerfDisk

I have run Anti-virus tests several times, and eliminated the viruses that were there.

I also ran One-Click Tune-Up & Sophos Rootkit remover.

I eliminated my wired adaptor as the cause when I connected wirelessly & still got BSOD.

The only thing I haven't tried yet is to reinstall the OS. If y'all can't solve this any other way, I will do the reinstall.

Thanks for all your efforts,

 

by: NivleshPosted on 2008-07-28 at 03:56:24ID: 22101991

Hi

when you get the bsod, in the line that is shown, you should see a file name as well beside KMODE_EXCEPTION_NOT HANDLED .. Can you please post this as well

 

by: ms3930Posted on 2008-07-28 at 08:40:05ID: 22104170

There is no file name on the KMODE_EXCEPTION line. The only thing after this line is "Beginning dump of physical memory". "Dump completed".

Is there a utility I can use to track the drivers or processes being used in real time?

 

by: ms3930Posted on 2008-08-08 at 16:54:08ID: 22194425

I tried reinstalling the OS, but no improvement. I guess I'll have to reformat and then reinstall the OS.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...