Windows XP boots to BSOD Physical memory dump in normal mode, safe mode okay

HI All,

We are going to be trying to help with a workstation this afternoon.  We haven't seen it yet and will be on limited time as the client is a charity client.  It apparently throws a BSOD physical memory dump when working in normal mode, but can be worked in safe mode just fine.  

The machine has been scanned via AV and I'm guessing it's probably not hardware (ram, HDD, etc) related as the machine runs fine in safe mode.  

Any obvious drivers or other areas you'd recommend looking if this is only coming up in normal mode?  I will post the exact error soon.

Thanks!
JsmplyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike ThomasConsultantCommented:
Safe mode runs with limited drivers so it is probably a driver, have they installed any new hardware recently?

0
angel_fire2701Commented:
Find out if they installed any new hardware recently like Mojotech suggested, I personally would check video drivers and/or wireless as they seem to do that alot.
0
StinkyPeteCommented:

Here is a link the list of stop error codes (The BSOD number)
It might give you a hint as to whats setting of the error

http://pcsupport.about.com/od/findbyerrormessage/tp/stop_error_list.htm

0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

JsmplyAuthor Commented:
Just got the error from the user. It is IRQL_NOT_LESS_OR_EQUAL 0x0000000A. I'm not on a computer right now though (replying via mobile). Will check that list.
0
JsmplyAuthor Commented:
Looks like it might be malware related. I'm on the machine now. Combofix deleted C:\windows\system32\drivers\a08055.sys and now it boots!  Anyone have any idea what that driver pertains too?
0
StinkyPeteCommented:
Often malware will use randomly generated file names.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JsmplyAuthor Commented:
Yep, that was it!  Seems to run fine now!  Thanks!
0
JsmplyAuthor Commented:
Thx!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.