About the blue screen code 0x0000008E and 0x000000A5

This article is from a dead blog

The old machine hardware often causes strange and strange problems. In addition, the popular robot dog also changes the blue screen statement ~
For example, 0X0000008E may cause blue screen code. The following is a post from the Pacific Forum.

Reference content
A friend's computer encountered a 0x0000008E blue screen error before and after system login yesterday. Please help me with the repair.

I. Analysis
Generally, when the program references an incorrect memory address, the 0x0000008E blue screen error may occur. When this error occurs when you log on to the system, it may be caused by the startup Item.

Ii. Detection
To skip the boot item, we press the F8 key during boot and select to start in safe mode with network connection.
The result is normal logon ~
It seems that the problem lies in the startup Item.
Run msconfig.exe, check the startup item, and find several O4 items in the pe_xscan log below. Check that the computer has a virus.

Download the pe_xscan scan log and analyze it. The following suspicious items are found (the same part of the Process Module is omitted ):
/=
Pe_xscan 08-03-03 by Purple Endurer

Windows XP Service Pack 2 (5.1.2600)
Administrator user group
Security Mode with network connection
[System Process] * 0
C: WINDOWSSYSTEM32FYOM. DLL | 10:22:26
C: WINDOWSSYSTEM32TAIJOAD. DLL | 10:22:58
C: WINDOWSSYSTEM32ATGNEHZ. DLL | 10:21:46
C: WINDOWSSYSTEM32TSQC. DLL | 10:22:52
C: WINDOWSSYSTEM32MNAUYGNIQAIXNAIJ. DLL |
C: WINDOWSSYSTEM32OQNAUHC. DLL | 10:22:46
C: WINDOWSSYSTEM32GNOLNAIT. DLL |
C: WINDOWSSYSTEM32DUYGNEF. DLL | 10:23:24
C: WINDOWSSYSTEM32SLCS. DLL | 10:24:54
C: WINDOWSSYSTEM32IEMNAW. DLL | 10:22:24
C: WINDOWSSYSTEM32WINLOGON. EXE * 220 | Microsoft (R) Windows (R) Operating System | 5.1.2600.2180 | Windows NT Logon Application | (C) Microsoft Corporation. all rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation |? | Winlogon | WINLOGON. EXE
C: WINDOWSSYSTEM32MNAUYGNIQAIXNAIJ. DLL |
C: WINDOWSSYSTEM32OQNAUHC. DLL | 10:22:46
C: WINDOWSSYSTEM32GNOLNAIT. DLL |
C: WINDOWSSYSTEM32DUYGNEF. DLL | 10:23:24
C: WINDOWSSYSTEM32FYOM. DLL | 10:22:26
C: WINDOWSSYSTEM32TAIJOAD. DLL | 10:22:58
C: WINDOWSSYSTEM32ATGNEHZ. DLL | 10:21:46
C: WINDOWSSYSTEM32TSQC. DLL | 10:22:52
C: WINDOWSSYSTEM32SLCS. DLL | 10:24:54
C: WINDOWSSYSTEM32IEMNAW. DLL | 10:22:24
C: WINDOWSSYSTEM32SERVICES. EXE * 392 | Microsoft (R) Windows (R) Operating System | 5.1.2600.2180 | Services and Controller app | (C) Microsoft Corporation. all rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation |? | Services.exe
C: WINDOWSSYSTEM32MNAUYGNIQAIXNAIJ. DLL |
C: WINDOWSSYSTEM32OQNAUHC. DLL | 10:22:46
C: WINDOWSSYSTEM32GNOLNAIT. DLL |
C: WINDOWSSYSTEM32DUYGNEF. DLL | 10:23:24
C: WINDOWSSYSTEM32FYOM. DLL | 10:22:26
C: WINDOWSSYSTEM32TAIJOAD. DLL | 10:22:58
C: WINDOWSSYSTEM32ATGNEHZ. DLL | 10:21:46
C: WINDOWSSYSTEM32TSQC. DLL | 10:22:52
C: WINDOWSSYSTEM32SLCS. DLL | 10:24:54
C: WINDOWSSYSTEM32LSASS. EXE * 412 | Microsoft? Windows? Operating System | 5.1.2600.2180 | LSA Shell (Export Version) |? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation |? | Lsass.exe
C: WINDOWSSYSTEM32MNAUYGNIQAIXNAIJ. DLL |
C: WINDOWSSYSTEM32OQNAUHC. DLL | 10:22:46
C: WINDOWSSYSTEM32GNOLNAIT. DLL |
C: WINDOWSSYSTEM32DUYGNEF. DLL | 10:23:24
C: WINDOWSSYSTEM32FYOM. DLL | 10:22:26
C: WINDOWSSYSTEM32TAIJOAD. DLL | 10:22:58
C: WINDOWSSYSTEM32ATGNEHZ. DLL | 10:21:46
C: WINDOWSSYSTEM32TSQC. DLL | 10:22:52
C: WINDOWSSYSTEM32SLCS. DLL | 10:24:54
C: WINDOWSSYSTEM32SVCHOST. EXE * 968 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services |? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation |? | Svchost.exe
C: WINDOWSSYSTEM32MNAUYGNIQAIXNAIJ. DLL |
C: WINDOWSSYSTEM32OQNAUHC. DLL | 10:22:46
C: WINDOWSSYSTEM32GNOLNAIT. DLL |
C: WINDOWSSYSTEM32DUYGNEF. DLL | 10:23:24
C: WINDOWSSYSTEM32FYOM. DLL | 10:22:26
C: WINDOWSSYSTEM32TAIJOAD. DLL | 10:22:58
C: WINDOWSSYSTEM32ATGNEHZ. DLL | 10:21:46
C: WINDOWSSYSTEM32TSQC. DLL | 10:22:52
C: WINDOWSSYSTEM32SLCS. DLL | 10:24:54
C: WINDOWSSYSTEM32CONIME. EXE * 456 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Console IME |? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation |? | Console | CONIME. EXE
C: WINDOWSSYSTEM32FYOM. DLL | 10:22:26
C: WINDOWSSYSTEM32TAIJOAD. DLL | 10:22:58
C: WINDOWSSYSTEM32ATGNEHZ. DLL | 10:21:46
C: WINDOWSSYSTEM32TSQC. DLL | 10:22:52
C: WINDOWSSYSTEM32MNAUYGNIQAIXNAIJ. DLL |
C: WINDOWSSYSTEM32OQNAUHC. DLL | 10:22:46
C: WINDOWSSYSTEM32GNOLNAIT. DLL |
C: WINDOWSSYSTEM32DUYGNEF. DLL | 10:23:24
C: WINDOWSSYSTEM32SLCS. DLL | 10:24:54
O2-BHO-{D29DCEE0-457B-45A2-A92D-741B95B7723B}-C: program filesinternet assumerpluginsns_sys55.sys
O4-HKLM .. RUN: [UPXDND] C: WINDOWSUPXDND. EXE
O4-HKLM .. RUN: [KVSC3] C: WINDOWSKVSC3.EXE
O4-HKLM .. RUN: [MSCCRT] C: WINDOWSMSCCRT. EXE
O4-HKLM .. RUN: [CMDBCS] C: WINDOWSCMDBCS. EXE
O4-HKLM .. RUN: [DBGHLP32] C: WINDOWSDBGHLP32.EXE
O4-HKLM .. RUN: [LOTUSHLP] C: WINDOWSLOTUSHLP. EXE
O4-HKLM .. RUN: [SHAPROC] C: WINDOWSSHAPROC. EXE
O4-HKLM .. RUN: [WINSVR32] C: WINDOWSWINSVR32.EXE
O4-HKLM .. RUN: [WSOCKDRV32] C: WINDOWSWSOCKDRV32.EXE
O4-HKLM .. POLICIESEXPLORERRUN: [COMREPL32] C: windowssystem32comrecfg. EXE
O4-HKLM .. POLICIESEXPLORERRUN: [VISIN] C: WINDOWSSYSTEM32VISIN. EXE

O20-AppInit_DLLs = fyom. dll, taijoad. dll, atgnehz. dll, tsqc. dll, mnauygniqaixnaij. dll, oqnauhc. dll, gnolnait. dll, duygnef. dll, slcs. dll, iemnaw. dll

O23-service: ASYNCMAC (ras asynchronous media driver)-SYSTEM32DRIVERSCOMINT32. SYS (automatic)
O23-service: COMINT32 (COMINT32)-C: WINDOWSSYSTEM32DRIVERSCOMINT32. SYS | (manual)
O23-service: MSERT-SYSTEM32DRIVERSMSELK. SYS (automatic)
O23-service: NPF (netgroup packet filter)-SYSTEM32DRIVERSNPF. SYS | WinPcap Netgroup Packet Filter Driver | 3, 1, 0, 27 | npf | Copyright? 2005 CACE Technologies. Copyright? 2003-2005 NetGroup, Politecnico di Torino. | 3, 1, 0, 27 | CACE Technologies | NPF + TME | npf. sys (manual)
O23-service: PCIHARDDISK (PCIHARDDISK)-C: WINDOWSSYSTEM32DRIVERSFAT32. SYS (manual)
O23-service: WINDOWSDOWN (WINDOWS_SYSTEMDOWN)-C: WINDOWSSYSTEM32SERVET. EXE (disabled)
O24-SHLEXECHOOK: [MICROSOFT]-{7914E0AA-ECCB-4311-B584-C49538227824} = C: WINDOWSSYSTEM32JHFRXZ. DLL
O24-SHLEXECHOOK: []-{D29DCEE0-457B-45A2-A92D-741B95B7723B} = C: program filesinternet assumerpluginsns_sys55.sys
O24-SHLEXECHOOK: [MICROSOFT]-{84143167-b645-4bff-b873-da1dc886e9a7} = C: WINDOWSSYSTEM32CEDAFB. DLL
O24-SHLEXECHOOK: [MICROSOFT]-{5E907A48-400E-4EA8-9792-FFAE052D59E9} = C: WINDOWSSYSTEM32PEDADT. DLL
O24