BSOD

[WoIBg]

Pozdrav svima!
Nadam se da ćete mi vi konačno pomoći nakon duge bezuspešne potrage za rešenjem mog problema.
Sve je počelo pre jedno dve nedelje kada sam prvi put instalirao igru Crysis na moj računar. Nakon određenog vremena prvi put mi se pojavio Blue Screen Of Death sa porukom:

IRQ NOT LESS OR EQUAL
Stop 0x0000000A (...)

U event logu mi je tada stajalo - TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Nakon toga uninstalirao sam Crysis, ali BSOD se i dalje pojavljivuje sa istom porukom (otprilike 1 dnevno). Međutim u event logu sada više nema ništa.
Pomoću WinDebuga otvorio sam minidump ali dobio sam zaista neočekivani rezultat (poslednji red):



Microsoft (R) Windows Debugger Version 6.11.0001.402 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini020909-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
************************************************** **************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
************************************************** **************************
Executable search path is:
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Mon Feb 9 10:44:17.703 2009 (GMT+1)
System Uptime: 0 days 1:15:56.445
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
.................................................. .............
.................................................. .
Loading User Symbols
Loading unloaded module list
..........
*** WARNING: Unable to verify timestamp for hal.dll
*** ERROR: Module load completed but symbols could not be loaded for hal.dll
Unable to load image afd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for afd.sys
*** ERROR: Module load completed but symbols could not be loaded for afd.sys
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {e8, 2, 1, 806e4a16}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*** WARNING: Unable to verify timestamp for avgtdix.sys
*** ERROR: Module load completed but symbols could not be loaded for avgtdix.sys
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys

[WoIBg]

************************************************** ***********************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
************************************************** ***********************
************************************************** ***********************


...... i tako u beskraj do ovoga.



************************************************** ***********************
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Probably caused by : avgtdix.sys ( avgtdix+1cb1 )

Followup: MachineOwner
---------




Najjčudnije mi je zaista ova situacija u poslednjem redu. Da li je ovaj problem izazvan AVGom? Iako u poslednjih par meseci imam poteškoća sa updatom ovog program nikad mi se ništa ovako drastično nije desilo.
Jedina opcija pored ova jeste da mi ne valja RAM i da ga testiram, ali računar mi je potpuno nov i nema skoro ni godinu dana kako sam ga kupio.
Inače konfiguracija je sledeća:

OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 2 Build 2600
OS Manufacturer Microsoft Corporation
System Manufacturer Gigabyte Technology Co., Ltd.
System Model 945PL-S3P
System Type X86-based PC
Processor x86 Family 6 Model 15 Stepping 13 GenuineIntel ~1808 Mhz
Processor x86 Family 6 Model 15 Stepping 13 GenuineIntel ~1808 Mhz
BIOS Version/Date Award Software International, Inc. F3, 5/25/2007
SMBIOS Version 2.4
Total Physical Memory 1,024.00 MB
Available Physical Memory 489.75 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB

Grafika: nVIDIA 8500GT 512 MB

Molim vas za bilo kakvu pomoć i izvinjavam se za dupli post!!!
Hvala unapred!

[dacajak]

Ja mislim da ti imas virus i da (ocigledno) avgtdix.sys pravi probleme. Neki kazu da je virus u pitanju i da ga treba obrisati.
Probaj ovako nesto da uradis:

Following is the virus description and detail of AVGTDIX.SYS removal:
For successful remove AVGTDIX.SYS removal , following the instruction:
1. Temporarily Disable System Restore .

2. Update the virus definitions. Reboot computer in SafeMode,;

3.Stop AVGTDIX.SYS removal virus files process if you can find on the task list;

4. Locate AVGTDIX.SYS removal virus files and double-click on it to uninstall virus files program. Follow the screen step-by-step screen instructions to complete uninstallation of AVGTDIX.SYS removal. Do not worry about this if you cannot find it in Add/Remove window.

5. Delete/Modify any values added to the registry related with AVGTDIX.SYS removal,Exit registry editor and restart the computer;

6.Clean/delete all infected file(s):AVGTDIX.SYS removal,or rename AVGTDIX.SYS removal virus files;

7.Please delete all your IE temp files manually,or download the tool ATF Cleaner to delete all your IE temp files.

8.Use antivirus program run a whole scan,or use the free online scaner (different famous antivirus online scaner)on the right site of home;

[WoIBg]

Hvala na pomoći!
Prvo sam skenirao računar sa AVGom i Ad-Awarom al nisam pronašao ništa.
Zatim sam iz safe moda uninstalirao AVG i pobrisao sve fajlove vezane za njega, instalirao Aviru i opet uradio sken.
Avira je pronašla nekoliko trojanaca:
TR/Agent
TR/Spy
TR/Adduser
BDS/Agent.ZNC
Nadam se da će sada biti sve ok.

[NIDZA bOj]

najverovatnije ti neki program stvara probleme ili virus,probaj ako imas recimo nod da skines novu bazu i skeniras komp,ako nista ne nadje onda je program ili sistemski fajl.