Solved

Analyze Win 7 core dump from BlueScreen

Posted on 2013-11-06
4
580 Views
Last Modified: 2013-11-22
If someone could please analyze my BlueScreen core dumps and let me know what is causing it, I would great appreciate it.  I get a blue screen after the computer has been on a few hours.  I have tried using BlueScreenView and cannot determine what is causing it.

Here are links to the past few dump files:
https://dl.dropboxusercontent.com/u/69170057/110613-24492-01.dmp
https://dl.dropboxusercontent.com/u/69170057/110613-26114-01.dmp
https://dl.dropboxusercontent.com/u/69170057/110613-33431-01.dmp


Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.1.7601.2.1.0.768.3
  Locale ID:      1033

Additional information about the problem:
  BCCode:      1e
  BCP1:      FFFFFFFFC0000096
  BCP2:      FFFFF80002AEEDDA
  BCP3:      0000000000000000
  BCP4:      0000000000000000
  OS Version:      6_1_7601
  Service Pack:      1_0
  Product:      768_1

Here are links to the past few dump files:
https://dl.dropboxusercontent.com/u/69170057/110613-24492-01.dmp
https://dl.dropboxusercontent.com/u/69170057/110613-26114-01.dmp
https://dl.dropboxusercontent.com/u/69170057/110613-33431-01.dmp


Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.1.7601.2.1.0.768.3
  Locale ID:      1033

Additional information about the problem:
  BCCode:      1e
  BCP1:      FFFFFFFFC0000096
  BCP2:      FFFFF80002AEEDDA
  BCP3:      0000000000000000
  BCP4:      0000000000000000
  OS Version:      6_1_7601
  Service Pack:      1_0
  Product:      768_1
0
Comment
Question by:shannon_adams
  • 3
4 Comments
 
LVL 91

Accepted Solution

by:
nobus earned 500 total points
ID: 39629571
24492 says : KMODE_EXCEPTION_NOT_HANDLED (1e)
26114 says the same - PROCESS_NAME:  dllhost.exe
33431 : says the same
Process name: DCOM DLL host process - this is a windows file, found in C:\Windows\System32
if found in windows folder -  it is a virus

so -  did you run any (ipdated) AV scan yet? if not, do so
then run these :
http://www.malwarebytes.org/mbam.php                         MBAM
http://majorgeeks.com/RogueKiller_d6983.html                  Roguekiller
0
 
LVL 91

Expert Comment

by:nobus
ID: 39669221
shannon -  what was the soltion you used?
0
 

Author Comment

by:shannon_adams
ID: 39670852
I run your two suggestions and those cleaned some things.  Then, I ran this: http://www.malwarebytes.org/products/antiexploit/

After that, I was getting BSOD after startup.  All Windows Startup Repair attempts failed.  I then purchased this http://neosmart.net/EasyRE/ and it fixed the BSOD.  All is well now.
0
 
LVL 91

Expert Comment

by:nobus
ID: 39670948
tx for feedback
i believe the free Paragon rescue kit does the same
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Show hidden user account 7 32
auto desk feauture 4 30
What is this Task? 4 42
UAC Controls - confused 9 37
A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now