Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD Windows XP


  • Please log in to reply
12 replies to this topic

#1 Eric56

Eric56

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 08 August 2012 - 06:57 PM

Hello My Desktop started crashing after my kids got ahold of it.

The computer goes into the BSOD mode 0x0000008E (0xC0000005, 0x8054A168, 0xF766D9A4, 0x00000000) whenever I try running a program or after 5 minutes of sitting.

I also tried going into Safe Mode to see if the BSOD still occurs and it happens in Safe Mode too.

I re-seated all the cable wires inside my machine as well as the ram to see if that would fix the problem. It didn't.

I un-hooked everything inside my computer and left only the the essentials to run ram, mb, hd, Monitor and power supply still goes into Blue Screen in Safe/Regular Mode.

I have atatched a picture of the Blue Screen.

Please help.

Attached Files

  • Attached File  BSOD.jpg   217.65KB   5 downloads


BC AdBot (Login to Remove)

 


#2 Eric56

Eric56
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 08 August 2012 - 07:17 PM

My Desktop is a Dell Dimension E310 2.80GHz Processor 1 gig ram.

#3 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,770 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:17 AM

Posted 08 August 2012 - 07:39 PM

The computer goes into the BSOD mode 0x0000008E (0xC0000005, , , ) ... after my kids got ahold of it.

Have you noticed any sign that the system may be infected with malware?
  • That is my prime suspect based on what you have reported and without doing further investigation.
It would be a good idea to run a full scan with your antivirus application, but I suspect you are not able to do that.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#4 Eric56

Eric56
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 08 August 2012 - 08:08 PM

I'm not able to run any programs.

#5 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,770 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:17 AM

Posted 08 August 2012 - 08:15 PM

I thought that might be the case.

Are you able to get me the minidumps to examine?
  • You may need to copy the Minidump folder to a flashdrive and then transfer to another working machine to zip them up and attach the zip file to a post.
Please zip up the minidumps and attach the resultant zip file to your next reply so I can have a closer look. There's a chance I might get some more useful info from them.
  • Navigate to C:\Windows\Minidump <<< folder
  • Click on the first minidump file to select it.
  • Hold down the <Shift> key, and click on the last minidump file to select all of the files.
  • Release the <Shift> key.
  • Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Minidump folder).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#6 Eric56

Eric56
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 08 August 2012 - 08:43 PM

Attached File  Mini071312-02.zip   289.18KB   3 downloadsHere is the minidump file.

#7 Eric56

Eric56
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 08 August 2012 - 08:45 PM

The size is too big for all of it due to upload limits.

#8 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,770 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:17 AM

Posted 08 August 2012 - 08:53 PM

Thank you: That will do just fine! :thumbup2:

Thirteen recent minidumps will give me some info to work with. I will get back to you when I have debugged a few of them.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#9 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:17 AM

Posted 09 August 2012 - 01:10 AM

While AustrAlien checks your dump files,please uninstall Norton antivirus.If there are still crashes upload the new dump file

Edited by narenxp, 09 August 2012 - 01:11 AM.


#10 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,770 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:17 AM

Posted 09 August 2012 - 06:39 PM

While AustrAlien checks your dump files,please uninstall Norton antivirus.If there are still crashes upload the new dump file

:thumbup2: Spot on! Thank you narenxp.

It is quite possible that ultimate responsibility for the current problem lies with the Windows XP system being outdated, running Service Pack 2 only. However, the chief cause of the BSODs is that memory is being corrupted by one or more drivers. Examination of the WinDbg output reveals that drivers belonging to the Norton/Symantec security software are directly implicated as likely causes in 5 of the 13 crashes. If you can remove Norton/Symantec from the system, that is likely to stop the current BSOD problem.

List of Norton/Symantec drivers loading on the the system:
BHDrvx86.sys Thu May 17 11:41:23 2012 ... Symantec Heuristics Driver
ccSetx86.sys Sat Nov 05 08:52:52 2011 ... Symantec/ Norton Common Client Settings Driver
eeCtrl.sys   Wed May 16 10:33:04 2012 ... Symantec /Norton
IDSxpx86.sys Fri May 25 10:08:07 2012 ... Symantec Intrusion Detection
Ironx86.SYS  Tue Nov 15 13:00:13 2011 ... Symantec Iron Driver
NAVENG.SYS   Wed Apr 25 18:38:43 2012 ... Norton/Symantec
NAVEX15.SYS  Wed Apr 25 18:36:43 2012 ... Norton/Symantec
SRTSP.SYS    Fri Mar 16 05:05:33 2012 ... Norton/Symantec AutoProtect
SRTSPX.SYS   Fri Mar 16 05:05:40 2012 ... Norton/Symantec AutoProtect
SYMDS.SYS    Tue May 17 08:14:26 2011 ... Symantec Data Store
SYMEFA.SYS   Wed Nov 23 11:48:14 2011 ... Symantec Extended File Attributes
SYMEVENT.SYS Wed Nov 23 05:30:26 2011 ... Norton/Symantec Event Library
SYMTDI.SYS   Sun Nov 13 07:50:42 2011 ... Norton/Symantec Network Dispatch Driver
Please confirm what I think we already know, whether or not you are able to load Windows normally and then proceed to uninstall the Norton/Symantec software. Meantime, I will consult with colleagues as to the best way to disable Norton/Symantec on startup and thereby allow you to start Windows normally. If we can do that successfully, then we can work out the best way to go about removing Norton/Symantec from the system and then deal with any other matters necessary.

Summary of the 13 available minidumps:
Mini080812-09.dmp BugCheck 1000007E, {c0000005, 805ac2e1, f7a1dac8, f7a1d7c4} Probably caused by : SRTSP.SYS
Mini080812-08.dmp BugCheck 100000BE, {c0002000, 34486025, a90c49e8, b       } Probably caused by : ntkrpamp.exe
Mini080812-07.dmp BugCheck 1000008E, {c0000005, 8054a168, a9c2b020, 0       } Probably caused by : Pool_Corruption
Mini080812-06.dmp BugCheck 1000008E, {c0000005, 8054a10d, a9d0e788, 0       } Probably caused by : Pool_Corruption
Mini080812-05.dmp BugCheck 1000007F, {8,        80042000, 0,        0       } Probably caused by : USBPORT.SYS
Mini080812-04.dmp BugCheck 1000008E, {c0000005, 8054a168, f766d9a4, 0       } Probably caused by : Pool_Corruption
Mini080812-03.dmp BugCheck 1000008E, {c0000005, 8054afcb, a9eb3824, 0       } Probably caused by : ntkrpamp.exe
Mini080812-02.dmp BugCheck 1000008E, {c0000005, 8054a168, a9966bbc, 0       } Probably caused by : Pool_Corruption
Mini080812-01.dmp BugCheck 1000007E, {c0000005, a85f305a, f7a11a08, f7a11704} Probably caused by : hardware
Mini071612-01.dmp BugCheck 1000008E, {c0000005, 8054a168, a912b80c, 0       } Probably caused by : Pool_Corruption
Mini071312-03.dmp BugCheck 1000008E, {c0000005, 8054a16a, f77fdaa4, 0       } Probably caused by : Pool_Corruption
Mini071312-02.dmp BugCheck 1000008E, {c0000005, bf8011c7, a9d22c38, 0       } Probably caused by : win32k.sys
Mini071312-01.dmp BugCheck 1000008E, {c0000005, a9f1157f, a8e2990c, 0       } Probably caused by : BHDrvx86.sys

Another summary of the 13 minidumps:
9 x Bugcheck code 1000008E (c0000005, , , )
2 x Bugcheck code 1000007E (c0000005, , , )
1 x Bugcheck code 100000BE 
1 x Bugcheck code 1000007F (00000008, , , )

=======================
BSOD BUGCHECK SUMMARY: 9 mindumps all dated August 8th, 2012.
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-09.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 09:30:16.234 2012 (UTC + 10:00)
System Uptime: 0 days 0:06:36.913
Unable to load image SRTSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
Probably caused by : SRTSP.SYS ( SRTSP+88f08 )
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00670760
BUGCHECK_STR: 0x7E
STACK_TEXT:
f7a1dbb0 805ad107 804d7000 e35a3440 8052e560 nt!MiFindExportedRoutineByName+0x51
f7a1dbec a8ba2f08 f7a1dc04 8512f000 00000000 nt!MmGetSystemRoutineAddress+0xab
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a1dc20 a8ba20ea 00000000 a8ba24a4 85c0bae0 SRTSP+0x88f08
f7a1dc84 80580214 85c0bae0 8512f000 00000000 SRTSP+0x880ea
f7a1dd54 80580323 000011f4 00000001 00000000 nt!IopLoadDriver+0x66c
f7a1dd7c 80538553 000011f4 00000000 865c1020 nt!IopLoadUnloadDriver+0x45
f7a1ddac 805cecc4 f7abdc78 00000000 00000000 nt!ExpWorkerThread+0xef
f7a1dddc 80545eee 80538464 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FAILURE_BUCKET_ID: 0x7E_SRTSP+88f08
Bugcheck code 1000007E
Arguments c0000005 805ac2e1 f7a1dac8 f7a1d7c4
BiosVersion = A03
BiosReleaseDate = 10/08/2005
SystemManufacturer = Dell Inc.
SystemProductName = Dell DV051
BaseBoardManufacturer = Dell Inc.
BaseBoardProduct = 0JC474
CPUID: " Intel® Pentium® 4 CPU 2.80GHz"
MaxSpeed: 2800
CurrentSpeed: 2793
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-08.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:38:12.812 2012 (UTC + 10:00)
System Uptime: 0 days 0:01:36.500
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+d0 )
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0xBE
PROCESS_NAME: iexplore.exe
FAILURE_BUCKET_ID: 0xBE_nt!KiTrap0E+d0
Bugcheck code 100000BE
Arguments c0002000 34486025 a90c49e8 0000000b
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-07.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:35:47.312 2012 (UTC + 10:00)
System Uptime: 0 days 0:01:42.996
*** WARNING: Unable to verify timestamp for BHDrvx86.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx86.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+162 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: svchost.exe
STACK_TEXT:
a9c2b0d4 8054a75f 00000001 865ba568 86056488 nt!ExDeferredFreePool+0x162
a9c2b114 805bec30 865eda4c 00000000 a9c2b150 nt!ExFreePoolWithTag+0x47f
a9c2b124 805bf01f 865eda4c a9c2b101 00000000 nt!ObReleaseObjectSecurity+0x1a
a9c2b150 8062d287 e3d74448 86056488 00000001 nt!ObCheckObjectAccess+0xd3
a9c2b19c 8062df28 e18efb60 009faef0 00000000 nt!CmpDoOpen+0x2d5
a9c2b39c 805be190 009faef0 00000000 86056488 nt!CmpParseKey+0x5a6
a9c2b414 805ba818 00000000 a9c2b454 00000240 nt!ObpLookupObjectName+0x53c
a9c2b468 80623b28 00000000 865ba528 804f8700 nt!ObOpenObjectByName+0xea
a9c2b564 8054140c a9c2b638 80000000 a9c2b600 nt!NtOpenKey+0x1c8
a9c2b564 80500669 a9c2b638 80000000 a9c2b600 nt!KiFastCallEntry+0xfc
a9c2b5e8 aa12efd4 a9c2b638 80000000 a9c2b600 nt!ZwOpenKey+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
a9c2b618 aa0e6a9d aa155ca0 80000000 a9c2b6e4 BHDrvx86+0x7efd4
a9c2b66c aa0e6d64 aa155ca0 aa155cb8 a9c2b68c BHDrvx86+0x36a9d
a9c2b694 aa0ebf5a 0005842c a9c2b6e4 e105842c BHDrvx86+0x36d64
a9c2b6b4 aa0d2781 e105842c e1bf3868 a9c2b6e4 BHDrvx86+0x3bf5a
a9c2b6d8 aa0d2898 e2c352b0 00000000 a9c2b718 BHDrvx86+0x22781
a9c2b6f0 aa12c24f 00000000 e2c352b0 00000000 BHDrvx86+0x22898
a9c2b71c aa14322a a9c2b730 aa1459e2 00000015 BHDrvx86+0x7c24f
a9c2b724 aa1459e2 00000015 a9c2b764 aa146167 BHDrvx86+0x9322a
a9c2b730 aa146167 e3e81dd0 00000015 e16dd074 BHDrvx86+0x959e2
a9c2b764 aa145c87 a9c2b878 e16dd008 ffffffff BHDrvx86+0x96167
a9c2b78c aa145e41 a9c2b878 e16dd008 ffffffff BHDrvx86+0x95c87
a9c2b7bc aa11ff52 00000001 a9c2b878 e2822000 BHDrvx86+0x95e41
a9c2b820 aa111a44 e2c352b0 e2c352b0 aa111a44 BHDrvx86+0x6ff52
a9c2b854 aa0b4110 a9c2b8f4 a9c2b878 85bb0678 BHDrvx86+0x61a44
a9c2b8a4 aa0b4a98 00c2b8f4 e2c352b0 00000014 BHDrvx86+0x4110
a9c2b8c0 aa106a5c e2c352b0 85b5a948 a9c2ba34 BHDrvx86+0x4a98
a9c2b8d8 aa10bdf5 a9c2b8f4 00000001 85b5a98c BHDrvx86+0x56a5c
a9c2b9f8 aa107e7d 850dc70c a9c2ba34 85bae720 BHDrvx86+0x5bdf5
a9c2ba14 f7402888 850dc70c a9c2ba34 a9c2ba64 BHDrvx86+0x57e7d
a9c2ba74 f740443e 00c2ba88 a9c2bb20 a9c2baec fltMgr!FltpPerformPreCallbacks+0x2d4
a9c2baa0 804ed2f9 a9c2baec a9c2bb28 86561020 fltMgr!FltpPreFsFilterOperation+0x7c
a9c2bac8 8056b165 01c2baec 00000001 00000001 nt!FsFilterPerformCallbacks+0xa5
a9c2bc20 8056c08e 860b7d48 00000001 00000010 nt!FsRtlAcquireFileExclusiveCommon+0x173
a9c2bc34 8050c918 860b7d48 00000010 00000000 nt!FsRtlAcquireToCreateMappedSection+0x12
a9c2bcd0 805aa38d a9c2bd1c 0000000f 00000000 nt!MmCreateSection+0x26e
a9c2bd40 8054140c 0075c9b4 0000000f 00000000 nt!NtCreateSection+0x12f
a9c2bd40 7c90e514 0075c9b4 0000000f 00000000 nt!KiFastCallEntry+0xfc
0075c8f4 00000000 00000000 00000000 00000000 0x7c90e514
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+162
Bugcheck code 1000008E
Arguments c0000005 8054a168 a9c2b020 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-06.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:32:07.546 2012 (UTC + 10:00)
System Uptime: 0 days 0:03:17.222
Unable to load image SYMEVENT.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+107 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: svchost.exe
STACK_TEXT:
a9d0e83c 8054a75f 00000001 a9d0e974 8000000b nt!ExDeferredFreePool+0x107
a9d0e87c 805e437a e16ed008 00000000 a9d0e8f8 nt!ExFreePoolWithTag+0x47f
a9d0e8a0 805e4839 00000000 00000000 00000000 nt!RtlpInheritAcl+0x76
a9d0e97c 805efb53 00000000 e2f0e128 a9d0e9d4 nt!RtlpNewSecurityObject+0x485
a9d0e9a8 805beccf 00000000 00000000 a9d0e9d4 nt!SeAssignSecurity+0x4f
a9d0e9d8 805c210d a9d0eaec 00000000 84c079e0 nt!ObAssignSecurity+0x35
a9d0eac0 805cf3fa 84c079e0 a9d0eaec 00000000 nt!ObInsertObject+0x47d
a9d0ec10 805cfe30 0160fa94 001f03ff 00000000 nt!PspCreateThread+0x5d0
a9d0ec88 aa4da139 0160fa94 001f03ff 00000000 nt!NtCreateThread+0xfc
WARNING: Stack unwind information not available. Following frames may be wrong.
a9d0ed3c 8054140c 0160fa94 001f03ff 00000000 SYMEVENT+0x17139
a9d0ed3c 7c917719 0160fa94 001f03ff 00000000 nt!KiFastCallEntry+0xfc
00000023 00000000 00000000 00000000 00000000 0x7c917719
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107
Bugcheck code 1000008E
Arguments c0000005 8054a10d a9d0e788 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-05.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:19:32.906 2012 (UTC + 10:00)
System Uptime: 0 days 0:03:12.585
Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_WorkerThread+3c )
UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
BUGCHECK_STR: 0x7f_8
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: System
STACK_TEXT:
f6862d24 805457ab f6862d6c 860fe4c0 ffdff120 nt!SwapContext+0xc7
f6862d38 80503818 860fe530 860fe4c0 804fb042 nt!KiSwapContext+0x2f
f6862d44 804fb042 804f7e5c 860c20e0 00000000 nt!KiSwapThread+0x8a
f6862d6c f5f30ed2 00000000 00000005 00000000 nt!KeWaitForSingleObject+0x1c2
f6862dac 805cecc4 860c2028 00000000 00000000 USBPORT!USBPORT_WorkerThread+0x3c
f6862ddc 80545eee f5f30e96 860c2028 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FAILURE_BUCKET_ID: 0x7f_8_USBPORT!USBPORT_WorkerThread+3c
Bugcheck code 1000007F
Arguments 00000008 80042000 00000000 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-04.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:12:43.156 2012 (UTC + 10:00)
System Uptime: 0 days 0:03:08.839
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+162 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: lsass.exe
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+162
Bugcheck code 1000008E
Arguments c0000005 8054a168 f766d9a4 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-03.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:09:00.078 2012 (UTC + 10:00)
System Uptime: 0 days 0:01:53.757
Probably caused by : ntkrpamp.exe ( nt!ExAllocatePoolWithTag+663 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: IERA.exe
FAILURE_BUCKET_ID: 0x8E_nt!ExAllocatePoolWithTag+663
Bugcheck code 1000008E
Arguments c0000005 8054afcb a9eb3824 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-02.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 05:43:38.234 2012 (UTC + 10:00)
System Uptime: 0 days 0:02:30.909
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+162 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: explorer.exe
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+162
Bugcheck code 1000008E
Arguments c0000005 8054a168 a9966bbc 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 05:39:12.062 2012 (UTC + 10:00)
System Uptime: 0 days 0:04:51.742
Unable to load image NAVEX15.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NAVEX15.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVEX15.SYS
Unable to load image SRTSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
Probably caused by : hardware ( NAVEX15+3305a )
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 0003f8b2
BUGCHECK_STR: 0x7E
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a11ad0 a87aaccb 00000bb9 f7a11b20 5fd765e6 NAVEX15+0x3305a
f7a11b4c a87ab5af e111f760 e111f760 e4370008 SRTSP+0x67ccb
f7a11b68 a87a5642 e4324948 e111f760 00000003 SRTSP+0x685af
f7a11b94 a8771fa8 e4370008 e45cb938 00000003 SRTSP+0x62642
f7a11bf4 a87ca7fd 00000005 85e56e98 00000000 SRTSP+0x2efa8
f7a11c1c a87cb16b 00000000 00000000 a87cb678 SRTSP+0x877fd
f7a11c84 80580214 85e56e98 85316000 00000000 SRTSP+0x8816b
f7a11d54 80580323 000005fc 00000001 00000000 nt!IopLoadDriver+0x66c
f7a11d7c 80538553 000005fc 00000000 865c28b8 nt!IopLoadUnloadDriver+0x45
f7a11dac 805cecc4 f7aa1c78 00000000 00000000 nt!ExpWorkerThread+0xef
f7a11ddc 80545eee 80538464 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FAILURE_BUCKET_ID: IP_MISALIGNED_NAVEX15.SYS
Bugcheck code 1000007E
Arguments c0000005 a85f305a f7a11a08 f7a11704
................................................................

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#11 Eric56

Eric56
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 09 August 2012 - 07:37 PM

Ok I just tried something....I tried each memory module seperatley and it happened to be one faulty memory module.

I also uninstalled Norton as requested.

I'm downloading the SP3 as I'm typing this.

Almost there.

System is working better.

#12 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,770 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:17 AM

Posted 09 August 2012 - 07:50 PM

... it happened to be one faulty memory module

:thumbup2: Well done! Thank you for letting us know about your discovery.

I did wonder about the memory and considered the value of testing after reading a post that I found during my research (the following taken from my notes):

Glen Bodie
In my case, I had this error on a Windows XP Pro SP3 system, new load, crash/blue screen several times a day, no pattern in terms of which application. Error codes included 00000019, 000000FC, 1000000A, 10000050, 1000007E, 1000007F, 1000008E, 100000BE, 100000D1 ... total of 40 codes all within 3 days! System was scanned for virus and trojans. All Windows patches applied. All drivers were updated. Unnecessary hardware removed. All boards / pins / cables were carefully reseated to make good contact. No improvement. Ran the Windows Memory Diagnostic (see EV100088) and found that one of the 2 DIMMs was marginal. Replaced the DIMM and no more crashes.
Source: http://www.eventid.net/display-eventid-1003-source-System-eventno-1274-phase-1.htm
>>>>> CHECK MEMORY <<<< ****


You would be well advised to run the Norton removal tool if applicable to your Norton version:
If you wish/need an alternative antivirus for the time being, or the long term, try one of the following free applications:
  • MSE (Microsoft Security Essentials) <<< I recommend that you try this!
  • Avira
  • avast!
  • AVG Free
    (Choose to download either the 32-bit or 64-bit application, depending on whether Windows on your system is 32-bit or 64-bit.)
Ensure that the Windows firewall is enabled.

Edited by AustrAlien, 09 August 2012 - 07:59 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#13 Eric56

Eric56
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 09 August 2012 - 10:32 PM

Thanks for all the help! System is super fast now. I doubled the ram.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users