BleepingComputer.com: Multiple BSOD a day

Hi,

For over a month now I have been getting BSODs.

They are not always the same... some I can remember - page fault in nonpaged area, trying to write to read only, the irq thing. Sorry not more specific, I should have written them down.

I have ran Vista pre-load diagnostics and it passed.
I ran the Dell support center PC-doctor check and it passed.
I have ran full scan with MBAM and it is clean
I have ran full scan with SAS and it is clean.

I am at my wits end trying to find out what the cause of these BSOD are.

Any help would be appreciated!

Thanks

This post has been edited by hamluis: 11 April 2011 - 10:52 AM
Reason for edit: Moved to AII from Vista.

Download BlueScreenView:
http://www.nirsoft.net/utils/blue_screen_view.html
unzip downloaded file and double click on BlueScreenView.exe to run the program.
when scanning is done, go to EDIT - Select All
Go to FILE - SAVE Selected Items, and save the report as BSOD.txt
Open BSOD.txt in Notepad, copy all of the content, and paste it into your next reply

Here is the BSOD.txt. Also, thanks for the fast reply!

==================================================
Dump File : Mini041011-02.dmp
Crash Time : 4/10/2011 2:14:16 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0xc99dd2d0
Parameter 2 : 0x00000000
Parameter 3 : 0x8308cd9a
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+a5125
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18538 (vistasp1_gdr.101014-0432)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini041011-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 151,576
==================================================

==================================================
Dump File : Mini041011-01.dmp
Crash Time : 4/10/2011 12:02:11 AM
Bug Check String : SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000007e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8307fe38
Parameter 3 : 0x89983c20
Parameter 4 : 0x8998391c
Caused By Driver : hal.dll
Caused By Address : hal.dll+75b0
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini041011-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 155,528
==================================================

==================================================
Dump File : Mini040611-01.dmp
Crash Time : 4/6/2011 2:56:28 PM
Bug Check String : ATTEMPTED_WRITE_TO_READONLY_MEMORY
Bug Check Code : 0x000000be
Parameter 1 : 0x9754f32c
Parameter 2 : 0x6b50f101
Parameter 3 : 0xb0fd9ac8
Parameter 4 : 0x0000000a
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+a5125
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18538 (vistasp1_gdr.101014-0432)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini040611-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 149,288
==================================================

==================================================
Dump File : Mini040511-02.dmp
Crash Time : 4/5/2011 4:44:55 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x00000004
Parameter 2 : 0x0000001b
Parameter 3 : 0x00000000
Parameter 4 : 0x82e56aea
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+5ad54
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18538 (vistasp1_gdr.101014-0432)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini040511-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 150,968
==================================================

==================================================
Dump File : Mini040511-01.dmp
Crash Time : 4/5/2011 9:32:28 AM
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
Parameter 1 : 0x001904aa
Parameter 2 : 0xdb2efa20
Parameter 3 : 0xdb2ef71c
Parameter 4 : 0x88b90d05
Caused By Driver : hal.dll
Caused By Address : hal.dll+750c
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini040511-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 155,528
==================================================

==================================================
Dump File : Mini040111-01.dmp
Crash Time : 4/1/2011 1:10:16 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x00340039
Parameter 3 : 0x80fe9c50
Parameter 4 : 0x00000000
Caused By Driver :
Caused By Address :
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini040111-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 155,536
==================================================

==================================================
Dump File : Mini031511-01.dmp
Crash Time : 3/15/2011 9:45:35 AM
Bug Check String : BAD_POOL_HEADER
Bug Check Code : 0x00000019
Parameter 1 : 0x00000020
Parameter 2 : 0x86f112d8
Parameter 3 : 0x86f11300
Parameter 4 : 0x08050001
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+9323
File Description : Microsoft Filesystem Filter Manager
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini031511-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 152,456
==================================================

==================================================
Dump File : Mini022811-01.dmp
Crash Time : 2/28/2011 2:50:48 PM
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
Parameter 1 : 0x001904aa
Parameter 2 : 0x8994f780
Parameter 3 : 0x8994f47c
Parameter 4 : 0x8d006479
Caused By Driver : aswMonFlt.sys
Caused By Address : aswMonFlt.sys+6479
File Description : avast! File System Minifilter for Windows 2003/Vista
Product Name : avast! Antivirus System
Company : AVAST Software
File Version : 6.0.999.0
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini022811-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 152,120
==================================================

==================================================
Dump File : Mini020311-01.dmp
Crash Time : 2/3/2011 5:05:28 PM
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
Parameter 1 : 0x001904aa
Parameter 2 : 0xce27da20
Parameter 3 : 0xce27d71c
Parameter 4 : 0x8338fd05
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+9d05
File Description : Microsoft Filesystem Filter Manager
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini020311-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6001
Dump File Size : 150,616
==================================================

==================================================
Dump File : Mini042110-01.dmp
Crash Time : 4/21/2010 9:24:31 PM
Bug Check String :
Bug Check Code : 0x0000010e
Parameter 1 : 0x00000002
Parameter 2 : 0x00000001
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : watchdog.sys
Caused By Address : watchdog.sys+122f
File Description : Watchdog Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini042110-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6000
Dump File Size : 139,176
==================================================

==================================================
Dump File : Mini041810-01.dmp
Crash Time : 4/18/2010 2:37:19 PM
Bug Check String :
Bug Check Code : 0x0000010e
Parameter 1 : 0x00000002
Parameter 2 : 0x00000001
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : watchdog.sys
Caused By Address : watchdog.sys+122f
File Description : Watchdog Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini041810-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6000
Dump File Size : 139,176
==================================================

==================================================
Dump File : Mini081109-01.dmp
Crash Time : 8/11/2009 8:48:22 PM
Bug Check String :
Bug Check Code : 0x0000010e
Parameter 1 : 0x00000002
Parameter 2 : 0x00000001
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : watchdog.sys
Caused By Address : watchdog.sys+122f
File Description : Watchdog Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini081109-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6000
Dump File Size : 139,176
==================================================

==================================================
Dump File : Mini072409-01.dmp
Crash Time : 7/24/2009 8:46:56 PM
Bug Check String :
Bug Check Code : 0x0000010e
Parameter 1 : 0x00000002
Parameter 2 : 0x00000001
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : watchdog.sys
Caused By Address : watchdog.sys+122f
File Description : Watchdog Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini072409-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6000
Dump File Size : 139,176
==================================================

==================================================
Dump File : Mini061909-01.dmp
Crash Time : 6/19/2009 10:40:30 PM
Bug Check String :
Bug Check Code : 0x0000010e
Parameter 1 : 0x00000002
Parameter 2 : 0x00000001
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : watchdog.sys
Caused By Address : watchdog.sys+122f
File Description : Watchdog Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini061909-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6000
Dump File Size : 139,176
==================================================

1) What is new or different since the last time everything worked properly (ie, new hw, new sw, virus, error, etc)?

2) Right-click on a command prompt icon and open as administrator. In the command prompt window type:chkdsk /r (then press ENTER). You'll be told the disk is in use and asked if you want to run checkdisk on the next boot. Say yes, exit the command prompt window, and reboot.

3) To check the ram, download memtest (http://www.memtest.org/). Burn it to a cd using a dedicated .iso burning utility (http://www.petri.co.il/how_to_write_iso_files_to_cd.htm), make sure the cd drive is at the top of the boot order in bios, then boot to the newly created cd and run the utility.

I will do the chkdsk/r as soon as I download the memtest. I have a question though, I went to the link you had, but not sure of which to download. Is it the pre-compiled bootable iso?

thx

This post has been edited by caution: 10 April 2011 - 02:58 PM

Yes

Finished with chkdsk, now will run memtest.

I did have a problem with a virus here http://www.bleepingcomputer.com/forums/topic381601.html/page__p__2148089__fromsearch__1#entry2148089

No new HW

SW - did download Toontown and regular Windows updates. Can try to find a listing if you want

I try not to get involved with problems where a virus was involved. Just too many variables - wish I'd known at the start. Go ahead and see if it's a ram issue, but if not I'm going to back out of the thread. Again, only because viruses can be the cause of too many issues that I'm not good at diagnosing.

Allan,

I let memtest run overnight, no problems.

If you back out of the thread, should I repost or what? Thanks for the help if you do back out.

This post has been edited by caution: 11 April 2011 - 07:08 AM

You can stop memtest if you haven't done so already .

And no, this thread will remain open and active. I'm sure others will be happy to try to help. Again, it's simply that viruses can leave problems behind even after they are removed and those problems can be difficult, if not impossible to diagnose (at least for me). Short of a format and clean install, I'm not good at offering advice regarding systems that have been infected.

Thanks for your help!

Such as it was, you're welcome.

Two comments:

a. Included among the errors you reflect...is a STOP 24 error. Per http://aumha.org/a/stop.htm :

"0x00000024: NTFS_FILE_SYSTEM
A problem occurred within NTFS.SYS, the driver file that allows the system to read and write to NTFS file system drives. There may be a physical problem with the disk, or an Interrupt Request Packet (IRP) may be corrupted. Other common causes include heavy hard drive fragmentation, heavy file I/O, problems with some types of drive-mirroring software, or some antivirus software."

This error could indicate a file problem...a file system problem...or a hard drive problem. Typically, if a file problem, chkdsk /r can overcome it. If a file system problem, chkdsk /r is ineffective. If a hard drive problem, chkdsk /r is ineffective and may be unable to complete.

b. During efforts to remove malware, files may become damaged. In such cases, a repair install of XP or running the sfc /scannow command may be helpful...in some cases, a clean install may be required.

You reflect a number of serious errors indicating key system files. My typical guess would be malware, based on the variety of errors displayed...but it could be hardware.

System model?

Louis

Hi Hamluis, thanks for picking up the thread.

Model: Dell Inspiron 1720.

http://support.dell.com/support/edocs/systems/ins1720/en/om_en/pdf/DT5494MR.pdf

Per above manual...restore to factory defaults is the ultimate repair option.

Since your malware log was posted about a month ago...and, IMO, the errors point to malware...I suggest that you run through the Am I Infected forum where someone with more expertise can take a look.

If you have run the Dell Diagnostics...that pretty much eliminates hardware that can easily be detected.

I will move this to Am I Infected.

Louis