asked on
ihimg.sys Blue screen of death
I have a dell that is giving me a blue screen of death i ran whocrashed and it tells me the culprit is ihimg.sys i googled for this file to see if i could find any info on it and found nothing anyone got any ideas? i have run combofix and there was a mbr infection which it seems to have removed.
Windows XP
Last Comment
johnb6767
Can you boot to safe mode? If not, what file is it hanging on? If you can get into safe mode, consider downloading and running a rootkit cleanersuch as UnHackme and malwarebytes...from within safe mode. It will require a reboot for the unhackme. Rootkit's will install a .sys driver that in turn downloads trojans.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
If you can get into the machine, you can also use Combofix. (stolen from rpggamergirl's postings...) :)
Here's the instructions, if it doesn't run at first, then redownload and rename before saving to your desktop.
Please download ComboFix by sUBs:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..
Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
If needed, here's the Combofix tutorial which includes the installation of the Recovery Console:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Personally, I wouldnt install the recvovery console.
Here's the instructions, if it doesn't run at first, then redownload and rename before saving to your desktop.
Please download ComboFix by sUBs:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..
Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
If needed, here's the Combofix tutorial which includes the installation of the Recovery Console:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Personally, I wouldnt install the recvovery console.
ASKER
I have run combofix already it did find rootkit activity and a mbr infection. both seem to be repaired and this is a remnant perhaps.
ASKER
i will also try the above.
ASKER
wow ok i haven't been able to try any of these steps all i can do is dell utility partition and a black screen imidiatly after dell bios splash screen. I think maybe a hard ware problem
ASKER
Sweet its fixed turns out the reg key was bogus all random letters and numbers i deleted the key from control sets 1,2,and 3 and the blue screen is got so far thanks a bunch.
Glad youre fixed....