Help!!! Blue Screen error on Dell with Windows XP message stop: 0x0000008E?

Question

Every time I try to start my Dell it begins to boot then goes to a blue screen, I have tried to boot in last known good configuration as well as safe mode to no avail. I believe that I may have done something to the registry trying to remove stupid anti-virus malware. I had deleted the malware under task manager then removed it from my computer under programs and ran c**p cleaner to fix registry issues worked fine initially but now 2 days later the computer will only go to blue screen with the following error message:

Stop: 0x0000008E (0xc0000005, 0xbf803eb6, oxf77fe7c4, 0x00000000) win 32k. sys - address BF803EB6 base at BF8000000, Datestamp 47e0e106

Can anyone please help me????

Answer 1

Could be a problem with device drivers, hardware or software. This  problem can be solved by uninstalling new software, updating device drivers and making minor configuration changes . From http://fixit.in/bluescreenofdeath.html . You can also run a free registry scan using utilities from http://re7.info

Answer 2

(edit) How I solved this:

I was able to get the PC described below back to booting up using the Avira Rescue CD linked below, with a couple of extra steps.

* When I booted from the Avira CD, it did not see the NTFS volume / C: drive that Windows is actually on. This was because that volume/drive needed to have chkdsk run to fix some minor inconsistencies (details at the very end of this response). I booted to the Recovery Console from the Windows XP CD and ran "chkdsk /r c:" to fix the errors (this takes quite a while) then rebooted from the Avira CD.

***NOTE THAT AVIRA DOES NOT REPORT THIS AS AN ERROR BECAUSE IT'S AT THE OPERATING SYSTEM LEVEL NOT AN AVIRA PROBLEM*** If the scan seems to go pretty fast or only sees 5-10,000 files, you may have this problem. Most active Windows partitions will probably have 50,000 or more files because of all the temporary files, cookies, etc.

* I had the Avira CD scan program files only initially, it found some infected files with the "Monder" trojan and "SuperJuan" adware. Removing those got the system back to booting.

* As part of all this the pagefile had ended up corrupted, so I removed the page file in safe mode to add it back in later.

* Booting normally worked, and I was able to download updates to AVG, but the system blue-screened again when it started to scan.

* Restarting back into safe mode (since antivirus updates had downloaded), I'm running AVG's virus scan right now and it's found several other trojans/viruses.

I'm not finished with the system, but between the problems that Avira fixed with the bootable CD and the problems that AVG is currently fixing in safe mode I suspect the system will be fine and I'll be returning it to that customer on Tuesday.

Based on what was found, I suspect that Flash wasn't quite up to date or that it was hit by an as-yet-unfixed security hole in Flash, but this could also have been from something received in email.

-------original response--------

I have a Dell laptop running XP Pro from a customer suffering the same basic problem - same error in win32k.sys at the same address.

It's unable to boot normally or into safe mode, and I haven't found much of use with the Recovery Console except that it does not appear to be the Rustock or Rustock.B infections that you might find mention of in searching. Running with a Memtest boot CD also shows no problems, nor do the advanced diagnostics that you can run on most Dell systems by pressing F12 (possibly repeatedly) during the initial startup - that should give you a list of locations to boot to including the hard drive, CD, BIOS setup and Diagnostics.

Searches based on the error address turn up a variety of questions about this error at that address, pretty much within the last month with an increase in the past 1-2 weeks, so I suspect a virus or possibly a recent update. Since my user is reviewing resumes she's opening more email attachments than usual, which could account for infection.

I'm still in the process of running chkdsk to get the disk to the point where the Avira Rescue CD is able to scan the full drive, I'll update this (if possible) if I'm able to clean it with that.

If possible I recommend backing up your important files (locations vary, but anything under c:\documents and settings\ plus some things elsewhere if you've put them there) before doing too much in terms of recovery attempts. If you have another PC with a CD burner I suggest downloading something like Ubuntu or Knoppix as a "Live CD," burning it to disk and booting from that CD. You should then be able to see both the internal HD and an external USB drive and be able to copy files across - it may not be pretty, but even if bad things happen you're still going to have your files so it's cleanup not recreating them.

Finally, you might be able to do a Repair install of Windows from the original disks, but be careful in doing so - if you're not sure about the question the disk is asking, don't agree to it - some "recovery" disks distributed with computers are designed to "recover" your system back to the way you first received it, which means wiping all of your files and reinstalling Windows.

If you need to do something immediately, the links I've attached may be of use.

* Avira CD not mounting NTFS volume problem: I checked this by going to a console on the Avira CD and running "ntfs-3g" to try to mount the volume manually; I already knew it was sdb2. It complained that the MFT and the MFT Mirror were different; resolving that requires chkdsk.

Answer 3

the following are the probablity of the blue screen or death screen

sotware:

1- New camera installed   if  not  then check:

2- New program installed

for the these two  you need to format using the 2 Dell recovery CD s

      a- Operating System

      b- Drivers and Tools

if formatting not helped and you still having the blue screen   then:

Hardware

3-  Memory test (RAM)  may be stopped functioning correctly

     if  not the Rams   then

4- Processor  should be checked or replaced       if not the reason  then the last

5-Motherboard shuld be replaced with new processor  as well

theses are what Dell recommending