Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Pues hace unos 2 dias se me reinicio el ordenador y salio una pantallita azul, despues de esto cada 10min salia una, ayer despues de limpiar el ordenador por todos lados y pasarle algunos analisis, con eset,kaspersky (no encontro virus elimino algunos "archivos atacantes ;D") ,y limpiarlo con ccleaner parecia que ya funcionaba de nuevo y pude estar como 3h sin pantallazos despues me fui a dormir hoy me levanto estoy como 1-2h sin nada y ahora me salio otra vez >.>

dejo aqui el error este ke guarde de esta mañana, creo ke este dice algo de los driver de sonido pero bueno a ver.. si algien me puede ayudar gracias



Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: *** Invalid ***
************************************************** **************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
************************************************** **************************
Executable search path is:
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntoskrnl.exe -
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp.080413-2111
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Mon Aug 17 12:49:33.906 2009 (GMT+2)
System Uptime: 0 days 0:48:24.524
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntoskrnl.exe -
Loading Kernel Symbols
.................................................. .................................................. ..............
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdd00c). Type ".hh dbgerr001" for details
Loading unloaded module list
..........
*** ERROR: Module load completed but symbols could not be loaded for smwdm.sys
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {250f8b9, 2, 1, b7e8b406}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

************************************************** ***********************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***

Probably caused by : smwdm.sys ( smwdm+40406 )

Followup: MachineOwner
---------

kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0250f8b9, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: b7e8b406, address which referenced memory

MODULE_NAME: smwdm

FAULTING_MODULE: 804d7000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 3f145d3e

WRITE_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
0250f8b9

CURRENT_IRQL: 2

FAULTING_IP:
smwdm+40406
b7e8b406 898834020000 mov dword ptr [eax+234h],ecx

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

BUGCHECK_STR: 0xD1

LAST_CONTROL_TRANSFER: from b7e8b406 to 804e187f

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f78a2ee8 b7e8b406 badb0d00 00000040 8990d72c nt!Kei386EoiHelper+0x2823
f78a2fac b7e6f282 02a10008 89830180 b7e287bf smwdm+0x40406
f78a2fd0 804dbbd4 89b49328 89b49318 00000000 smwdm+0x24282
f78a2ff4 804db89e b475b1d0 00000000 00000000 nt!KiDispatchInterrupt+0x360
00000000 00000000 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2a


STACK_COMMAND: kb

FOLLOWUP_IP:
smwdm+40406
b7e8b406 898834020000 mov dword ptr [eax+234h],ecx

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: smwdm+40406

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: smwdm.sys

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

Podrias comentarnos que tipo de pc tenes?
Eso viene a ser un problema qisas de un driver pero lo dudo mucho, casi seguro que es una memoria que esta fallando...

Comenta que pc tenes y leete este post ,

Problemas con Memoria ¿Cómo usar Memtest?

Slds

El ultimo dia formatee C tengo otro disco duro ese se quedo intacto.

Sobre las memorias no he probado eso pero ayer las probe una a una, desconectando las otras, y el problema todavia estaba.


Las pantalla azul puede venir de un problema con virus o de un disco duro que necesita de desfragmentar, el hd que no formate lo necesito desfragmentar per tardaria muchisimo tiempo.


Mi pc es bastante antiguo, amd athlon 2800, hd 120gb con dos particiones y 3 modulos de ram total 2gb.

Gracias por la ayuda

Puede que el error sea de ambas , o bien qe el slot de la memoria este sucio limpialo con un soplete o un cotonete seco sin alcohol o con alcohol isopropilico, para no dañar los circuitos electronicos, y las memorias limpialas con una goma de borrar y luego limpiales los residuos que queden de esta.

Revisa la fuente y la temperatura del micro.

Con respecto al virus, ese error no es un error de virus generalemnte los de virus suelen ser.,
stop ax010101 blablabla.

Igual no descartes y pasale un scanner .

Saludos.