Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD Error code 10000050


  • Please log in to reply
10 replies to this topic

#1 McStick

McStick

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 08 September 2009 - 09:04 PM

I'm just after getting this error code on a blue screen of death, totally unexpectedly. I looked it up in event viewer and the details are as follows:

Error code 10000050, parameter1 80000049, parameter2 00000000, parameter3 8056dfd7, parameter4 00000000.

0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 35 1000005
0020: 30 20 20 50 61 72 61 6d 0 Param
0028: 65 74 65 72 73 20 38 30 eters 80
0030: 30 30 30 30 34 39 2c 20 000049,
0038: 30 30 30 30 30 30 30 30 00000000
0040: 2c 20 38 30 35 36 64 66 , 8056df
0048: 64 37 2c 20 30 30 30 30 d7, 0000
0050: 30 30 30 30 0000

Or in "words"

0000: 74737953 45206d65 726f7272 72452020
0010: 20726f72 65646f63 30303120 35303030
0020: 50202030 6d617261 72657465 30382073
0030: 30303030 202c3934 30303030 30303030
0040: 3038202c 66643635 202c3764 30303030
0050: 30303030

Can anyone help explain what's caused and how I prevent it happening again?

Thanks in advance.

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 43,901 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:33 AM

Posted 08 September 2009 - 09:20 PM

0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
Requested data was not in memory. An invalid system memory address was referenced. Defective memory (including main memory, L2 RAM cache, video RAM) or incompatible software (including remote control and antivirus software) might cause this Stop message, as may other hardware problems.

It's probably a malware item or a damaged driver, but it could be many things.

Do a search of your system for any .dmp files...and then try to go through the procedures at Help Diagnosing BSODs And Crashes (BC) - http://www.bleepingcomputer.com/forums/t/176011/how-to-receive-help-diagnosing-blue-screens-and-windows-crashes/

That may give us more to go on.

Louis

#3 McStick

McStick
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 08 September 2009 - 09:57 PM

Thanks for the fast reply.

Just to let you know the link to the online scanners ends in a 404 not found error.

Earlier on today, I ran a scan with Malwarebytes and superantispyware. Would this be enough, or should I do an online scan too? If so, what one?

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 43,901 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:33 AM

Posted 09 September 2009 - 10:21 AM

Sorry about the link to online scanners...things change and that link is as you stated.

Another link to replace that one: See the post by The weatherman at http://www.bleepingcomputer.com/forums/t/197842/smitfraud/.

Understand that I am no expert of any sort when it comes to malware (or anything else)...I base my suggestions on the fact that I don't have malware problems and my systems have remained trouble-free for years. For opinions/suggestions re malware from those who are much more knowledgeable than I am...I suggest visiting some of our malware forums, which are listed at the index webpage for this website.

When scanning for malware...IMO, there is no one reference that does it all. This seems to be a common misunderstanding by many persons who have problems with malware.

Malwarebytes and SUPERAntiSpyware are both good programs that I would suggest (I have both installed on each of my systems), in addition to a reliable, updated AV program (I use Avira AntiVir Personal, free version). These are programs that reside permanently on a system, not online scans.

Louis

#5 McStick

McStick
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 09 September 2009 - 08:24 PM

Ok, I was trying to work my way through that list, but was still trying to run a scan. I had just finished running a Panda scan, which only found tracking cookies and a vunerability in internet explorer which was allegedly unpatched. However all the updates from microsoft are already installed.

Now I've got another problem. After running the scan, various windows started freezing, and then eventually the whole computer froze. No matter what program I go into now, it always freezes. I tried running a Norton scan, and it froze after 100 files. I'm not sure if this is connected, but I was trying to install iTunes 9 at the time as well, and it failed. (It froze as well.) Now I can't even get my computer to turn off. When the computer does this, it won't load anything. CPU usage sits about 5-10% and the loading light stays off. What's happened?

#6 McStick

McStick
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 12 September 2009 - 08:41 PM

Ok I'm back again with all the information you asked for. The virus scans were clean, but I've just had another BSOD, different error code this time. I'll post the details up in the next post. Hope you can help!


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini090909-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.090206-1234
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Wed Sep 9 02:30:21.625 2009 (GMT+1)
System Uptime: 1 days 2:46:42.322
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {80000049, 0, 8056dfd7, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!NtWaitForSingleObject+7b )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 80000049, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8056dfd7, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: 80000049

FAULTING_IP:
nt!NtWaitForSingleObject+7b
8056dfd7 8b4048 mov eax,dword ptr [eax+48h]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: BBC iPlayer Des

LAST_CONTROL_TRANSFER: from 804dd99f to 8056dfd7

STACK_TEXT:
a6de8d50 804dd99f 0000050c 00000000 00000000 nt!NtWaitForSingleObject+0x7b
a6de8d50 7c90e514 0000050c 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f734 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!NtWaitForSingleObject+7b
8056dfd7 8b4048 mov eax,dword ptr [eax+48h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!NtWaitForSingleObject+7b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 498c19b5

FAILURE_BUCKET_ID: 0x50_nt!NtWaitForSingleObject+7b

BUCKET_ID: 0x50_nt!NtWaitForSingleObject+7b

Followup: MachineOwner
---------

#7 McStick

McStick
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 12 September 2009 - 08:45 PM

And here's the next error report. If there's anything else you need, I'll try and get it for you!


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini091309-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.090206-1234
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Sun Sep 13 02:09:44.375 2009 (GMT+1)
System Uptime: 0 days 0:31:07.074
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8057d341, a78ff6e0, 0}

Probably caused by : ntkrnlmp.exe ( nt!NtQueryVirtualMemory+1f3 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8057d341, The address that the exception occurred at
Arg3: a78ff6e0, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!NtQueryVirtualMemory+1f3
8057d341 8b06 mov eax,dword ptr [esi]

TRAP_FRAME: a78ff6e0 -- (.trap 0xffffffffa78ff6e0)
ErrCode = 00000000
eax=69ae2cff ebx=fffff000 ecx=0007815b edx=7815b45a esi=69ae2cff edi=01629ef0
eip=8057d341 esp=a78ff754 ebp=a78ff7f4 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!NtQueryVirtualMemory+0x1f3:
8057d341 8b06 mov eax,dword ptr [esi] ds:0023:69ae2cff=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: iexplore.exe

LAST_CONTROL_TRANSFER: from 804dd99f to 8057d341

STACK_TEXT:
a78ff7f4 804dd99f ffffffff 7815b45a 00000000 nt!NtQueryVirtualMemory+0x1f3
a78ff7f4 7c90e514 ffffffff 7815b45a 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
01629d1c 7c90d98a 7c80ba5d ffffffff 7815b45a 0x7c90e514
01629d40 7c80ba86 ffffffff 7815b45a 01629ef0 0x7c90d98a
01629d58 6bedbb62 7815b45a 01629ef0 0000001c 0x7c80ba86
01629f24 6bec1745 01630000 01629f48 0162afd8 0x6bedbb62
01629f28 01630000 01629f48 0162afd8 7815b45a 0x6bec1745
01629f2c 01629f48 0162afd8 7815b45a 0162afd7 0x1630000
01629f30 0162afd8 7815b45a 0162afd7 0162afc8 0x1629f48
01629f48 00000000 00000010 7c809a10 00000000 0x162afd8


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!NtQueryVirtualMemory+1f3
8057d341 8b06 mov eax,dword ptr [esi]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!NtQueryVirtualMemory+1f3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 498c19b5

FAILURE_BUCKET_ID: 0x8E_nt!NtQueryVirtualMemory+1f3

BUCKET_ID: 0x8E_nt!NtQueryVirtualMemory+1f3

Followup: MachineOwner
---------

#8 hamluis

hamluis

    Moderator


  • Moderator
  • 43,901 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:33 AM

Posted 13 September 2009 - 08:28 AM

Well...I don't see much that I can interpret.

From what I can see...this BBC iPlayer, iTunes, and possibly your video drivers are suspect. Something has a corrupt/damaged driver and is causing havoc with the system.

Since I know that iTunes has drivers...I suggest uninstalling that. You may reinstall it, if you like, after discerning whether your troubles go away with uninstalling.

If you downloaded anything from BBC iPlayer and installed it...I suggest the same.

http://iplayerhelp.external.bbc.co.uk/help...esktop_problems

Louis

#9 McStick

McStick
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 13 September 2009 - 08:41 AM

Ok thanks for your help! I've been using iPlayer for a long time now with no problems (TV download service) but I only updated iTunes on Wednesday. Would that make it more likely that iTunes is causing the problems?

I've only got the 2 BSOD's in 4 days so it may take a while to determine which program is causing the problems! Many thanks once again!

#10 hamluis

hamluis

    Moderator


  • Moderator
  • 43,901 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:33 AM

Posted 13 September 2009 - 09:24 AM

Users sometimes don't seem to realize...just because a system worked perfectly 5 minutes ago...that doesn't mean that a file cannot become damaged/corrupted in the next second or so...and create problems that previously did not exist.

When files become damaged, they will not respond in the manner for which they were designed...which is why the uninstall/reinstall routine is suggested for possible suspects. It's easy to enough to replace just about any file, including files from installed programs and Windows itself.

Louis

#11 McStick

McStick
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:04:33 AM

Posted 13 September 2009 - 11:53 AM

Ok, thanks for the help. I'll have a go at re-installing both!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users