Constant Crashing, minidump

By r3yna
Mar 5, 2009
  1. Hi,
    I just reinstalled my system with Window Xp SP2 home edition, but now everything crashes randomly. I cannot even get into the computer properties for more than a second. Also, I cant set my display settings to anything but the 800 by 600. This did not happen before the re-installation. I really hope that you guys can help me. Thanks!

    Here is what windog got:

    Unknown bugcheck code (69696969)
    Unknown bugcheck description
    Arg1: 00000000
    Arg2: 00000000
    Arg3: 00000000
    Arg4: 00000000

    Debugging Details:

    PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
    PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details


    BUGCHECK_STR: 0x69696969


    LAST_CONTROL_TRANSFER: from f7e17756 to 804f40e6

    ecbecc1c f7e17756 69696969 f7e17410 04515f10 nt!KeBugCheck+0x10
    WARNING: Stack unwind information not available. Following frames may be wrong.
    ecbecc34 804ea221 852daf18 84bada80 806abfe0 crashdrv+0x756
    ecbecc44 8055d0fe 84badaf0 84e09538 84bada80 nt!IopfCallDriver+0x31
    ecbecc58 8055de46 852daf18 84bada80 84e09538 nt!IopSynchronousServiceTail+0x5e
    ecbecd00 80556cea 000000bc 00000000 00000000 nt!IopXxxControlFile+0x5c2
    ecbecd34 8052d571 000000bc 00000000 00000000 nt!NtDeviceIoControlFile+0x28
    ecbecd34 7ffe0304 000000bc 00000000 00000000 nt!KiSystemService+0xc4
    0012fb4c 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4


    f7e17756 c20400 ret 4


    SYMBOL_NAME: crashdrv+756

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: crashdrv

    IMAGE_NAME: crashdrv.sys


    FAILURE_BUCKET_ID: 0x69696969_crashdrv+756

    BUCKET_ID: 0x69696969_crashdrv+756

    Followup: MachineOwner
  2. Route44

    Route44 TechSpot Ambassador Posts: 11,964   +69

    Do you have any torrent or file sharing software installed?
  3. r3yna

    r3yna TS Rookie Topic Starter

    i believe so, does ares count?
  4. Route44

    Route44 TechSpot Ambassador Posts: 11,964   +69

    It is highly probable that you are infected. Recent information regarding crash.exe which is in the information you supplied: Added by the Troj/LowZone-H trojan.

    I did a lot of research and this executable is all over the place but from what I can gather torrents is one way it enters a PC and several torrent sites I looked at even encourage downloading of this executable.

    My strongest suggestion is that you go to the forum here entitled Virus and Malware removal, read the stiky on 8 Steps and follow the instructions to the letter.
Topic Status:
Not open for further replies.

Similar Topics

Create an account or login to comment

You need to be a member in order to leave a comment
TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...

Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.