Vista - BlueScreen

Hi,

I am having trouble with my laptop it's a toshiba a100 32 bit with vista home premium.

I don't know much about computers and am generally pretty chilled out when it comes to resolving issues with them but this is REALLY making me lose my cool.

About a month ago my computer started crashing regularly and eventually i couldn't even log on after the welcome screen. it just sat there spinning and would eventually freeze.

After reading a few forums i found a post which said to do a system recovery but i don't have a disk and then i found something that said i need to make a disk but can't for the life of me fugure out how to do that.


i tried 'last known good configuration' and finally passed the welcome screen to find that i had a fake security centre virus. I installed Norton 360 and it got rid of the virus but the computer still crashes regularly.

I also ran a memory diagnostic and that was okay.

I checked details in the event viewer and the only critical one was:

Log name: System
Source: Kernel-Power Logged: 8/08/2009 2:35:10 PM
Event ID: 41 Task Category: None
Level: Critical Keywords: (2)
User: SYSTEM Computer: home-PC
Op-Code: Info

(i don't know what that is)

there are a whole heap of errors aswell.

I tried to look at the minidump files but it says windows can't open them.

i logged on in safe mode and backed up all of my important files on my portable hard drive so everything else can pretty much go.

At the moment it's just sitting there and i can't click on the start menu or anything.

I'd really appreciate any help that you can give me.

are you looking to completely wipe your system and start again or do you want some help in getting rid of that virus? btw dont do any online shopping while you have this problem (i guarantee you the virus is still there just waiting to grab your credit card info)

Those backed up files might have the virus so scan them if you transfer them to another pc. Post the .dmp files so they can be analyzed. Otherwise download malwarebytes and superantispyware, update them if you can and scan your pc. If anything comes up, scan again. Then run an online scanner such as F-Secure, followed by Norton 360 again. Lastly download Sophos Anti Rootkit and scan for any last remnants.

well, i think the virus is gone because i can't see the icon in the task bar anymore.

I'm happy to just completely wipe everything as am sick of stuffing around trying to figure out what's wrong.

will try to get the files uploaded now.

tried to attatch files but said .dmp were invalid how do i post them?

Attach as .zip

Use 7zip if you don't have a zip utility.

http://www.7-zip.org/download.html

oh yeah. haha

please find attatched

i also saw at the last crash that it said:

DRIVER_POWER_STATE_FAILURE

it hasn't said that before

did the .dmp files help?

Shame someone hasn't analysed the .dmp files quickly. Here is the last .dmp you uploaded:

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them. A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 81e20a94, address of system function (system call)
Arg2: 00000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 0000ffff, Thread->KernelApcDisable
Arg4: 00000000, Previous KernelApcDisable
Debugging Details:
------------------

FAULTING_IP:
nt!NtDeviceIoControlFile+0
81e20a94 8bff mov edi,edi
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1
PROCESS_NAME: ccSvcHst.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 77410f34 to 81c46567
STACK_TEXT:
a5fd0d64 77410f34 badb0d00 01c2f698 00000000 nt!KiServiceExit2+0x16e
WARNING: Frame IP not in any known module. Following frames may be wrong.
01c2f6f0 00000000 00000000 00000000 00000000 0x77410f34

STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
nt!NtDeviceIoControlFile+0
81e20a94 8bff mov edi,edi
SYMBOL_NAME: nt!NtDeviceIoControlFile+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4549ad6c
FAILURE_BUCKET_ID: 0x1_nt!NtDeviceIoControlFile+0
BUCKET_ID: 0x1_nt!NtDeviceIoControlFile+0
Followup: MachineOwner
---------

It seems as if drivers are causing your problem. Open up device manager, check for any exclamation points. Then update your sound, audio, wireless drivers, and if possible, the motherboard drivers. PM me if you have further questions.