I found a couple of suspicious "services" running in Windows XP on my PC. One is called "Bonjour Service," and the other "Ccevaspi3-f". Since I'm very protective of my PC, I immediately turned them off, ran a search of adware, deleted the usual cookies, and ran Norton. Not 5 seconds in the anti-virus search, the screen turned black, then blue with lots of writing, and the PC rebooted. It was too fast for me to read what it said... I had never seen the blue screen of death on Win XP before. Not a good sign...

Anyone ever hear of those services?

 

www.google.com

 

Try the Microsoft Antispyware program.. its free.

It wasnt developed by them.. so its pretty good

 

Bonjour Service is part of the latest iTunes. It's some sort of uPNP service.

 

XP has a setting to automatically restart your computer instead of showing the BSOD. You can turn it off if you would prefer the BSOD over restarts.

 

Thank you! I wish I knew that earlier. I thought I had been picked by a worm.

 

Did you run Norton again? Which Norton do you have and do you have any of the service packs?

I think it is very likely that you've all of a sudden ran out of kernal space for your kernal drivers. What programs did you recently installed? It could be a legit program as this problem isnt typically caused by adware and spyware.

http://service1.symantec.com/SUPPORT...ection=2&Src=w

That website should solve your problem. If not, provide more information such as system specs and current programs you were running if you remember. Btw that second service you deleted could very possibly be a virus/spyware. It has not come up in any google search which may imply that it is one of those bastard spywares that continously changes its name. Wish I could help you more. Hope that website helps

 

its funny i found this thread today. my cousin just called me and told her laptop just got the BSOD and it comes on every time she turns it on. is there anyway to get onto windows to back things up? will safe mode work? thanx for any help.

 

You->>


do a search and D/L "Hi-Jack This" it will find all the programs running on your computer and tell you which one are bad and which are good

 

After installing IIS twice (to enable ftp), each time I started getting the BSOD on xp forever. i.e. everytime I reboot. I ended up having to restore from an image.

every now and then I still get a BSOD with a 'Bad pool caller' error.

 

I ran Norton today again and it crashed again. It's SystemWorks Pro 2003. Only diff is that the PC just froze. No message, no BSOD, no reboot. Very weird.

I have SP1, all updates. Should I get SP2? Thanks for your attention, I'll check out that web site. Here's my system specs:

Hardware

MSI K8N Neo2 Platinum Nforce3 Ultra 939
Athlon 64 3500+ 2.21 GHz
Corsair 4x512MB DDR PC3200
XFX 6600GT 128MB DDR3
M Audio Revolution 7.1
Creative Audigy 1 (game port use only)
Western Digital Raptor 10,000 RPM SATA 75GB HDD; SATA1
Samsung SpinPoint P 7,200 RPM 80GB ATA150 HDD; SATA 2
Western Digital Raptor 10,000 RPM SATA 75GB HDD; SATA3
Lite-On CDRW LTR40125S 40x12x48; master on IDE 2
NEC DVD+/-RW 8X ND-2510A; slave on IDE 2
MS Intellimouse Explorer
Sony SDM-M61 16" LCD DVI monitor
HP Photosmart 7350
Onkyo 6.1 Channel Receiver HT-R520 & Speaker Set
BenQ PE7800 Projector (16:9) DLP Matterhorn Chip

Main Apps.

Windows XP Home SP1
Adobe Premiere Pro 1.5
Adobe Photoshop 7.0
Macromedia Dreamweaver 3.0
MS Office 2003 Pro
Nero 6.0 Ultra


EDIT: I deleted iTunes before the scan. Just remembered I installed Cute FTP this past week. Will remove that as well.

 

Deleting Cute FTP deleted "Ccevaspi3-f" from the services list. See if Norton finishes now...

 

Read it throughly... I have and AMD CPU, so it's not applicable I think.

 

10 mins into the scan, got the BSOD, and the PC rebooted again. Only item I was running was MS Explorer...

 

My bad. I found the listing in the services list again. It's deactivated, though.

 

Clicked to stop the PC from rebooting, so I could see the text in the BSOD; and got the following error. I don't see this service anywhere in the list!

 

Okay sorry. I reread your problems and the site again, and it has nothing to do with you. If you did not do anything recently that required messed with kernals (Cute FTP doesnt as far as I know) then thats not going to solve your problem.

Hi-Jack This might be a good solution. You should try that first.

Nice computer you got there though. Well here are my suggestions. If you want to do it the easy way, you can probably system restore your computer to about a day before this thing happened. If you cannot do that or you do not wish to, you can 1) run Hi-Jack This, 2) Uninstall and Reinstall Norton, get the appropriate updates and run it again. Your Norton may have been corrupted though it is a small possibility.

Another option before those 2 is to start computer in safe mode (unless you did it already) and run Norton. If it does crash, it is very possible that it is caused by a virus or a corrupt Norton. Run Hi-Jack first then run Norton.

I will take a look at that Alerter service later. But from what I know of the Alerter service, it should not affect you greatly unless you are on network that requires the administrative alerts. I assume that this is a home computer. Norton does not depend on Alerter so Alerter should not be the direct cause of your crashes. At this point, the service you previously thought was associated with Cute FTP is probably a virus/spyware. Not much you can do if it corrupts Norton.

Those solutions assumes that Norton is corrupted or that the virus is triggered specifically by Norton. Now this solution here will help you if an actual system file is corrupted. I think that the Ciasdfkjhbasd whatever service is runned under System correct? I mean when you Ctrl+Alt+Del you see processes running in different parts of your computer. This is what you do. Get the Windows XP cd and put it in your drive. Go to Start Menu--->Run and then type

sfc.exe /scannow

That should replace any/all of your corrupted files. It probably will ask you to reboot so do that. Run Norton again. I hope that solves your problems. If it doesnt, please take a screenshot of your processes.

 

Hello,

Thanks for your attention and assistance. I removed Norton, and the PC continued to crash. I installed Norton back in, and I can't get it to download all the updates. It will give me an error message (posted below).

rC:\PROGRA~1\COMMON~1\SYMANT~1\ccWebWnd.dl^
238712 Bytes 7/14/2004 23:18:08 v103.0.0.83.

I downloaded Hi-Jack This, but it brings up too much stuff that seem proper:

Logfile of HijackThis v1.99.1
Scan saved at 8:32:42 PM, on 10/6/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RevoTask.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\WINDOWS\System32\hphmon04.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 5.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\HPHipm11.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Andre\Desktop\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [RevoTaskbarApp] C:\WINDOWS\System32\RevoTask.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 5.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/tech...l/LSSupCtl.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1122435105518
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1125279117203
O16 - DPF: {AEF76437-F960-4EBC-97EA-7BBB4230CF38} (OcarptMain Class) - https://oca.microsoft.com/en/secure/ocarpt.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/tech...l/SymAData.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/ps/en/check/qdiagh.cab?326
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


I ran sfc.exe; but my WinXP CD came out before SP1, so it trips every time it finds a file from SP1 or SP2. Hence, it didn't help.

Here's a typical BSOD:



I copied the ntfs.sys file from the CD, and am still getting problems.

Once, it complained about a "nv4_disp.dll" file. A search of the file came up in 8 places, with different sizes and date attributes... I can't replace this one as easily.

I backed up all my files to other drives. I'd like to avoid formating the hdd.

 

Does the system crash randomly or just when running certain applications?

I would normally suspect you have a hardware problem but since this didn't start happening until you screwed around with some services I'm not sure.

You may want to try reseating the memory on the system board and have the system run chkdsk during bootup.

 

Try some of these 4th one down concerns a Spyware Bot

http://support.microsoft.com/search/...0&y=0&srch=sup

PS: Microsoft Support 0wns you.
If you ever have a problem with a MS Product, you should start by going to http://support.microsoft.com - Click Advanced Search in the upper left, choose your product and type in your error.

PS: I dont remember if it was ntfs.sys that caused it on my machine, but on my brand new machine, I found that installing the latest nForce and GeForce Drivers WITH the nForce4 Firewall Software, would cause Blue Screens all over the place (Even with the Firewall set to OFF). It always happened when I hit WIN+F to invoke the File Search feature. Going into Control Panel and removing the nVidia Firewall App completely solved the problem.

 

When I got the screen of death, I could never get it back right...

In the end, I changed out the harddrive and reloaded XP... Has been fine ever since.

 

I had similar errors after installing IIS. I ended up having to restore my xp from an image.

 

as suggested above, at this point you could copy all your important files onto a cd or something and just reformat the harddrive and start clean...

 

Judging by the initial look of your HiJackThis log, your computer seems to be virus free, although I will have to go back and look at it again to confirm. Now, please also aquire rootkit revealer and see if there are any possible system rootkits installed on your computer.

Here is something else I have realized after looking at your configuration and problem. There is a known problem with some of the NVidia drivers, aka the nv_disp.dll. The driver some times get caught in an infinite loop and causes the system to BSOD. The best solution is to update your NVidia driver, and get SP2 for Windows XP, you are really crazy running your system on SP1 when SP3 is about to come out.

 

one time mandi adams gf had a random program on it called Pron manager she was like wtf while we were laughin our asses off

 

Lesbian pron?

 

I did install SP2 last week, and it didn't resolve the problem. Installing the latest Nvidia drivers, however, did fix the problem. I also switched my Internet connection from the Nvidi- based chipset on the motherboard to the Realtek-based chipset. I didn't realize it, but I just recently started to log online with a cable. Earlier, I had a wireless setup; but that proved to be a nuisance. Going to the Nvidia ethernet port might have started it all!

Thanks a bunch!

Now if only I can get Norton to finish the d'l of updates... it refuses to accept one of them.

 

I was wrong. My PC is still bugging me. Seems like the Nvidia drivers -- even the latest ones -- are not friendly. I feel overwhelmed. I'll have to back-up my stuff, and format the whole thing.

 

The only time I've ever seen the blue screen in XP is when I had this:

"MEMORY PARITY ERROR"

That was pretty bad. Turns out I had damaged RAM. Replaced the bad stick and it hasn't happened since. Generally blue screens in XP seem to be related to hardware issues.