Windows Vista Blue Screen of Death

Thanks for the tip! I fixed it so my machine won't automatically restart and will allow me to write down the problem.

I tried to read the text file, but here's the oddity...it doesn't exist! I went through all of the files in the appropriate location and there isn't a WERE658.tmp.version.txt file there. I searched my system and the search also wasn't able to find that file anywhere.

I'm very confused as to what's happening. I've found on Google that it appears when this BSOD has happened with XP it's a RAM issue and the RAM may need to be replaced but I did a Windows Memory test and there's (allegedly) no problems with my memory.

When the BSOD (Blue Screen of Death) appears, a STOP code, error message, and possibly a filename should be provided. That helps identify the source of the issue, whereas the information displayed after the system reboots is only valuable to Microsoft.

Let us know.
John

John,

Thanks for that tip. As Mark suggested above, I changed the settings in Vista so my machine won't reboot immediately after a BSOD. When it occurs again, I'll write down everything.

The only thing I can recall from the few seconds of a BSOD today was that the word kernel appeared in the description on the BSOD but I am not sure in what context.

I will post again when it occurs and I can write down all of the information it gives me. It's only happened a few times, and not once every day since I first saw it either. So I am unsure when it will occur again.

I will let others give better and comprehensive advice, but that 0x7A BSOD with ataport.sys seems to be a hardware problem, either with incompatible disk or controller drivers, firmware, or hardware.

Have you made any hardware changes recently, eg hard drives, or updated any drivers?

Let's see what others say.

Mark

Mark,

No, I haven't made any changes to the hardware or drivers at all.

I've run checkdisk and its not found any problems with my current hard drive either. I'm really stumped on this one.

Bob,

It's happened 2-3 times while I've been away from the machine but last night it happened while I was using the machine. I checked for a trojan in my registry as suggested by one of the Google results, but didn't find anything.

I will disable the screen saver just in case that's an issue. I'm not sure how to check if it's a heat issue, or what to do about it if it is. The laptop's currently on a table with plenty of ventilation.

In general, the only time you should see a BSOD in WindowsNT/2000/XP/Vista/7 is if there's bad hardware and/or a bad driver.

You used to see them quite a bit more in the Win 3.x and 95-Me days because programs were able to directly access the hardware. The NT line of Windows (see above list) prohibits most programs, even those run with admin level privileges, from directly accessing the hardware. They MUST go through the OS which acts as a broker. So only bad hardware and/or bad drivers should be able to trigger BSOD errors.

Is this a HP DV6000 or DV9000 series? This and other lines do exactly what you note. But the details are not in your posts so far. So we may be missing a big clue.

Bob,

Nope, it's a Toshiba Satellite A205. What details are missing? I copied everything that was on the BSOD. What else do I need to find out?

The BSOD details are not enough. You have to tell a lot more.

There are a dozen models of the A205. It matters since I can look for some common issue with your model.

Now post your HIJACKTHIS log so I can see if you have some TOXIC COMBO installed.
Bob

It's a Toshiba Satellite A205-S5859. I read that the Toshiba Satellite laptops at one time had overheating issues, but I believe that this was in the model previous to the one I've got.

Full system specs are Core 2 Duo, 1.83 GHz, 2 GB RAM.

Here's the HiJackThis Log file.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:24:10 PM, on 7/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\Nuance\PDF Create! 5\PdfCreate5Hook.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Toshiba\Utilities\KeNotify.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxtray.exe
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\eFax Messenger 4.4\J2GDllCmd.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\CJ\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstart
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://espn.go.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstart
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Nuance PDF Create! 5-reminder] "C:\Program Files\Nuance\PDF Create! 5\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Create! 5\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PDF5 Registry Controller] C:\Program Files\Nuance\PDF Create! 5\RegistryController.exe
O4 - HKLM\..\Run: [PDFHook] C:\Program Files\Nuance\PDF Create! 5\pdfcreate5hook.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [HWSetup] \HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel PhotoDownloader.exe" -startup
O4 - HKLM\..\Run: [HotSync] "C:\Program Files\PalmSource\Desktop\HotSync.exe" -AllUsers
O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [eFax 4.4] "C:\Program Files\eFax Messenger 4.4\J2GDllCmd.exe" /R
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: MLB.TV NexDef Plug-in.lnk = C:\Users\CJ\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe
O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append the content of the link to existing PDF file - res://C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Append the content of the selected links to existing PDF file - res://C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Append to existing PDF file - res://C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Create PDF file - res://C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Create PDF file from the content of the link - res://C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Create PDF files from the selected links - res://C:\Program Files\Nuance\PDF Create! 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: WebEx Service Host for Support Center (atashost) - WebEx Communications, Inc. - C:\Windows\system32\atashost.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files\Maxtor\Sync\SyncServices.exe
O23 - Service: pinger - Unknown owner - C:\Toshiba\IVP\ISM\pinger.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: RMWPService - Apache Software Foundation - C:\Program Files\Reference Manager 12 Demo\WebPublisher\thirdparty\Apache2\bin\RMWP_Apache_Admin.exe
O23 - Service: RosettaStoneLtdController - Rosetta Stone Ltd. - C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdController.exe
O23 - Service: VIPRE Antivirus + Antispyware (SBAMSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe
O23 - Service: Swupdtmr - Unknown owner - c:\Toshiba\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 14099 bytes

The easy items to remove are the lines that have (no file) or (file missing). No, this is just getting that area tidy and will not help the BSOD issue.

However, there is a lot going on in this machine.

Think over what's in this list and what can you do without. I'd toss out the google bar and such items first using the uninstaller and not Hijackthis.

http://reviews.cnet.com/laptops/toshiba-satellite-a205-s5859/4507-3121_7-33016436.html?tag=mncol;rnav and other research shows no wide spread issues so this leads me to ask:

-> Did anyone add RAM?
-> What software was installed since it was unpacked?
(besides Vipre)
Bob

Bob,

Basically, everything except for the Toshiba or Windows Vista stuff has been installed on my machine since I got it. All of the Windows Office applications I installed myself as well. I can get rid of some of the things listed in HiJackThis because they're for programs which I no longer actually have installed on the machine. For example, Rosetta Stone I uninstalled via the program's uninstaller application months ago.

Since the BSOD started, the only things I've installed are Vipre and HijackThis. The RAM is the original factory install. I did a MemTest on the machine when this originally started happening, and it turned up no problems with my memory.

I installed Vipre because my free AVG anti-virus somehow got corrupted and it kept giving me a "license corrupted" message even though there was no license because it was a free program. I went through a week of conversations with AVG on their forum because of it (and others who had the same problem about the same time I did) and eventually had to boot into safe mode to get rid of the program because it wouldn't uninstall via any other method.

Perhaps this issue and the AVG problem are somehow related? The AVG problem did occur at about the same time as the first BSOD I got.

The clues are not in place yet.

But AVG appears no where in that HJT log so I won't count that as a cause. But it could be a symptom. A friend's machine got this infection -> READ http://www.symantec.com/security_response/writeup.jsp?docid=2009-031816-5114-99&tabid=2

This is showing up in variant forms. The way I think it's getting in is that the owner installs a CODEC that comes with that trojan.

At the time I ran into this one, none of the usual antivirus (AV) detected it. It was not until it started popping up random web sites that I was able to track it down and kill it.

Besides the BSOD, what other clues do we have?

-> Any odd web pages coming up?
-> Any one remove the battery from the machine to "save it"?
-> How about google bar and what I noted? Can those go away?
Bob

Bob,

Unfortunately (only because it would help define the issue) I haven't gotten any odd web pages come up when I load Firefox (what I primarily use) or IE 7. I use IE very rarely and just loaded it up to check, and it loaded fine with ESPN.com as the home page, which it is set to do.

The battery hasn't left the computer either.

I forgot to mention in the previous post that Google Desktop also did come factory installed, I didn't install it myself. I'll try uninstalling Google desktop and then re-installing it (because, frankly, I do love the application) and see what happens.

I just remembered that some months ago I had a problem where Explorer.exe would suddenly, and inexplicably, crash but Vista would not give me a BSOD on that, just ask if I wanted to re-start the application. I'd say yes, and it would re-start just fine. I was in the process of investigating that issue when it suddenly just stopped happening. I haven't had Windows Explorer.exe crash on me in probably two months.

I'll try uninstalling Google desktop and re-installing it to see if that will correct my BSOD issue.

If the BSOD is repeatable then we don't reinstall.

Also you do know that Windows does bsod on corrupt jpegs and a few bad AVI files? Microsoft doesn't seem to have the cured yet.
Bob

I don't think it's Google Desktop for a few reasons. One, Google Desktop came pre-installed from the factory. Google's got a relationship with Toshiba apparently. Two, both of the Gadgets I had installed were created by Google themselves and not a user. Three, I've had both gadgets installed for nearly as long as I've owned the PC and no problems until recently. I was just kind of hoping perhaps it was a corrupted file that would get deleted and fixed with a re-installation. It only took a few minutes, so it was worth the at least a try.

I only have three jpeg's on my machine that weren't pre-installed with Vista. All three open fine and do not appear to be corrupted. I ran them, plus the Vista pre-installed jpegs, through Vipre and it didn't report any issues. I don't have any avi's on my machine at all. All of my music is iTunes .m4p and I don't have any downloaded movies on my machine.

But, Jimmy posted that most software applications aren't allowed to access the hardware directly in the NT line of Windows OS's like Vista. So, at this point, shouldn't I be looking for hardware problems?

I've gone through Device Manager and looked for updated drivers for my hard drive, CD/DVD combo drive, video and audio adapters. According to Windows, I'm using the latest drivers for each device. I also went and selected every single device in the Device Manager and all are reported to be working properly. The only odd thing is that device manager lists two Intel Core 2 Duo T5550 processors. Both are reported to be working properly. Is this normal? I thought it would only list one processor.

I tried to install Everest to check my PC's temperature but it doesn't fully support my machine. It says I've got a Intel ICH8 South Bridge and that version of Everest doesn't support it. However, the report function did tell me the sensor in my hard drive reports the machine is running at 97 degrees Fahrenheit/36 degrees Celsius. From what I've been able to gather using Google, this temp doesn't seem out of the normal range.

I installed SpeedFan and it reports my core temperatures are 47C for both Core 0 and Core 1. It's gotten as high as 48-49 degrees Celsius for each.

My method is simple. We move back to as few things as possible. If we can't do that then you'll have to call the machine in and make it a warranty issue.

Sorry, BTDT too many times so let's say good luck and good hunting.
Bob