TechSpot

Constant Crashing, minidump

By r3yna
Mar 5, 2009
  1. Hi,
    I just reinstalled my system with Window Xp SP2 home edition, but now everything crashes randomly. I cannot even get into the computer properties for more than a second. Also, I cant set my display settings to anything but the 800 by 600. This did not happen before the re-installation. I really hope that you guys can help me. Thanks!

    Here is what windog got:

    Unknown bugcheck code (69696969)
    Unknown bugcheck description
    Arguments:
    Arg1: 00000000
    Arg2: 00000000
    Arg3: 00000000
    Arg4: 00000000

    Debugging Details:
    ------------------

    PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
    PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x69696969

    PROCESS_NAME: CRASH.EXE

    LAST_CONTROL_TRANSFER: from f7e17756 to 804f40e6

    STACK_TEXT:
    ecbecc1c f7e17756 69696969 f7e17410 04515f10 nt!KeBugCheck+0x10
    WARNING: Stack unwind information not available. Following frames may be wrong.
    ecbecc34 804ea221 852daf18 84bada80 806abfe0 crashdrv+0x756
    ecbecc44 8055d0fe 84badaf0 84e09538 84bada80 nt!IopfCallDriver+0x31
    ecbecc58 8055de46 852daf18 84bada80 84e09538 nt!IopSynchronousServiceTail+0x5e
    ecbecd00 80556cea 000000bc 00000000 00000000 nt!IopXxxControlFile+0x5c2
    ecbecd34 8052d571 000000bc 00000000 00000000 nt!NtDeviceIoControlFile+0x28
    ecbecd34 7ffe0304 000000bc 00000000 00000000 nt!KiSystemService+0xc4
    0012fb4c 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    crashdrv+756
    f7e17756 c20400 ret 4

    SYMBOL_STACK_INDEX: 1

    SYMBOL_NAME: crashdrv+756

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: crashdrv

    IMAGE_NAME: crashdrv.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 2f2131c8

    FAILURE_BUCKET_ID: 0x69696969_crashdrv+756

    BUCKET_ID: 0x69696969_crashdrv+756

    Followup: MachineOwner
     
  2. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Do you have any torrent or file sharing software installed?
     
  3. r3yna

    r3yna TS Rookie Topic Starter

    i believe so, does ares count?
     
  4. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    It is highly probable that you are infected. Recent information regarding crash.exe which is in the information you supplied: Added by the Troj/LowZone-H trojan.

    I did a lot of research and this executable is all over the place but from what I can gather torrents is one way it enters a PC and several torrent sites I looked at even encourage downloading of this executable.

    My strongest suggestion is that you go to the forum here entitled Virus and Malware removal, read the stiky on 8 Steps and follow the instructions to the letter.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...