1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

the problem is blue screen & restart

Discussion in 'Windows XP' started by snow rose, 2008/03/12.

Page 1 of 2
  1. 2008/03/12
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    Hi everyone

    The problem happened when my friend install kaspersky, than she made restart than blue screen appear than it restart automatically... i can open the PC only in safe mode

    and i delete the kaspersky in safemode
    but it still occur the problem for the blue screen and restart

    and when i tried to reinstall the kaspersky it appears for me this messege ((the system administrator has set policies to prevent this installation))

    So plzzzzzzzz help to solve this problem
     
    snow rose,
    #1
  2. 2008/03/12
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Follow these instructions to post a Dump Data Log.

    If you do not have a dump, ensure that your machine is configured to write out a dump by following the directions from microsoft

    Please note:
     
    Arie,
    #2


  3. to hide this advert.

  4. 2008/03/12
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    thanx alot from replying ,,
    i analyisis with winDbg scan for the problem i found this
    1) Probably caused by : klif.sys ( klif+d9a9 ) >>>>>> this is by kasper but there is no kaspersky

    2) Probably caused by : SYMEVENT.SYS ( SYMEVENT+ed80 )>>>>>> i don't know how to fix this problem

    and also i scan it with Hijackthis this is the report

    http://www.zshare.net/download/8822219ef105bd/
     
    snow rose,
    #3
  5. 2008/03/12
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    snow rose

    Please post the entire dump log here and the HJT log - split over 2 or more posts if necessary.

    Initial reaction ....

    You had Kapersky installed and uninstalled it? Parts of it are still there and probably conflicting with Norton - SYMEVENT.SYS

    Need to see the full logs.
     
    PeteC,
    #4
  6. 2008/03/12
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    snow rose,
    #5
  7. 2008/03/12
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    You misunderstood my post ....
    Debug the dump files as outlined in Post #2 and post each log in your next post here - not on an external URL
     
    PeteC,
    #6
  8. 2008/03/12
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    I hope u mean this:
    ----------------------------------


    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\compu me\My Documents\My Received Files\Mini031208-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: C:\WINDOWS\Symbols
    Executable search path is:
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
    Debug session time: Wed Mar 12 12:43:14.234 2008 (GMT+4)
    System Uptime: 0 days 0:00:58.812
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Loading Kernel Symbols
    ....................................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ...
    Unable to load image klif.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for klif.sys
    *** ERROR: Module load completed but symbols could not be loaded for klif.sys
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000007F, {8, 80042000, 0, 0}

    *** WARNING: Unable to verify timestamp for fltMgr.sys
    Unable to load image SPBBCDrv.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for SPBBCDrv.sys
    *** ERROR: Module load completed but symbols could not be loaded for SPBBCDrv.sys
    Probably caused by : klif.sys ( klif+d9a9 )

    Followup: MachineOwner
    ----------------------------------------------------------------------------------------------------------------------------------------------------


    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\compu me\My Documents\My Received Files\Mini031208-02.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: C:\WINDOWS\Symbols
    Executable search path is:
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
    Debug session time: Wed Mar 12 12:44:20.000 2008 (GMT+4)
    System Uptime: 0 days 0:00:56.546
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Loading Kernel Symbols
    ...................................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ...
    Unable to load image klif.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for klif.sys
    *** ERROR: Module load completed but symbols could not be loaded for klif.sys
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000007F, {8, 80042000, 0, 0}

    *** WARNING: Unable to verify timestamp for fltMgr.sys
    Unable to load image SPBBCDrv.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for SPBBCDrv.sys
    *** ERROR: Module load completed but symbols could not be loaded for SPBBCDrv.sys
    Probably caused by : klif.sys ( klif+d9a9 )

    Followup: MachineOwner
    ----------------------------------------------------------------------------------------------------------------------------------------------------


    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\compu me\My Documents\My Received Files\Mini031208-03.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: C:\WINDOWS\Symbols
    Executable search path is:
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
    Debug session time: Wed Mar 12 12:46:26.718 2008 (GMT+4)
    System Uptime: 0 days 0:01:57.281
    Unable to load image ntoskrnl.exe, Win32 error 2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Loading Kernel Symbols
    .............................................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    .....
    Unable to load image Ntfs.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for Ntfs.sys
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000007F, {8, 80042000, 0, 0}

    Unable to load image SYMEVENT.SYS, Win32 error 2
    *** WARNING: Unable to verify timestamp for SYMEVENT.SYS
    *** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
    Unable to load image klif.sys, Win32 error 2
    *** WARNING: Unable to verify timestamp for klif.sys
    *** ERROR: Module load completed but symbols could not be loaded for klif.sys
    *** WARNING: Unable to verify timestamp for SPBBCDrv.sys
    *** ERROR: Module load completed but symbols could not be loaded for SPBBCDrv.sys
    Probably caused by : SYMEVENT.SYS ( SYMEVENT+ed80 )

    Followup: MachineOwner
    ---------
     
    snow rose,
    #7
  9. 2008/03/12
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    From my reading of your logs you have a conflict between Kapersky and Symantic (Norton) - we know you have a failed install of Kapersky, but please post which Symantec (Norton) products you have installed.
     
    PeteC,
    #8
  10. 2008/03/12
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    i tried to remove any norton program by (( Norton Rmoving Tool)) but there is messege (( that i can't countiute untill i delete symantec antivirus 9 or later)) and when i tried to delete it from Add/Remove Programes but i can't delete it in safemode


    So how can i delete it?????
     
    snow rose,
    #9
  11. 2008/03/12
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    PeteC,
    #10
  12. 2008/03/13
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    it's stop working after i fix some by HijackThis program
    but still i can't delete the symantec from Add/Remove because it request passward!!!!

    and about this manual removal in structions its not easy for my friend to do it,, So please Do u have the passward or any program to uninstall it??

    Thanx alot for helping us
     
    snow rose,
    #11
  13. 2008/03/13
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    i mean (( it' stop restarting --not stop working)) Sorry for that!
     
    snow rose,
    #12
  14. 2008/03/13
    LostUser

    LostUser Inactive

    Joined:
    2006/02/27
    Messages:
    100
    Likes Received:
    0
    There are a few fixes for that Symantec issue SR. I myself have had to remove Symantec (win98) and it was giving that same password issue. In both cases. In one of the cases I also still had to do the manual uninstall.

    The manual uninstall I had to do was incredibly detailed and highly annoying.

    I think the fix for the password was to replace a setting in the registry with a specific string ... I'll look online a bit more for that one...

    Ok, I found a couple links...I am pasting the particular ExpertsExchange content here because I'm not sure if everyone can see ExpertsExchange info all the time. The second link has a specific text to change the registry which makes the password 'symantec'. You could try just using that password before trying these fixes first.

    My own preference if the above password doesn't work would be to try the password options and using the uninstall on the PC before downloading something to do an uninstall. Although I haven't investigated all the links from the uninstall link info either.

    Possible solution 1
    http://www.experts-exchange.com/Software/Internet_Email/Anti-Virus/Symantec/Q_22730474.html

    Possible solution 2
    http://www.tek-tips.com/viewthread.cfm?qid=1140374&page=1
    Good luck
     
    LostUser,
    #13
  15. 2008/03/13
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    OK but please can u tell me how to change the value in step #3
    --------------------------------------
    1) Go to Start -> Run and type regedit
    2) Search for "UseVPUninstallPassword "
    3) Change the value from 1 to 0 for "UseVPUninstallPassword "
    4) Close the registry and retry the uninstall.
    -------------------------------
     
    snow rose,
    #14
  16. 2008/03/13
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    OK i changed the value and i uninstall it

    Thaks alot for all of you
     
    snow rose,
    #15
  17. 2008/03/13
    LostUser

    LostUser Inactive

    Joined:
    2006/02/27
    Messages:
    100
    Likes Received:
    0
    Glad it worked.

    I also made an error where I mentioned that the second link changed something in the registry. That one was actually looking at a .dat file (not the registry .dat files) with the information in it.
     
    LostUser,
    #16
  18. 2008/03/13
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    It's Ok

    i tried this solution and it works

    1) Go to Start -> Run and type regedit
    2) Search for "UseVPUninstallPassword "
    3) Change the value from 1 to 0 for "UseVPUninstallPassword"
    4) Close the registry and retry the uninstall.

    Thanx alot for helping me :)


    But which antivirus do u advise me to Use??
     
    snow rose,
    #17
  19. 2008/03/13
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    AVG Free is reliable, effective and - free :)
     
    PeteC,
    #18
  20. 2008/03/13
    snow rose

    snow rose Inactive Thread Starter

    Joined:
    2008/03/12
    Messages:
    33
    Likes Received:
    0
    what about kaspersky
    and spyware terminator??
     
    snow rose,
    #19
  21. 2008/03/13
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Kapersky is fine, as for Spyware Terminator - not a program I am familiar with, but providing that the source is http://www.spywareterminator.com/ it should be OK. There is a rogue program of the same name from another company which should be avoided.
     
    PeteC,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...