Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Randomly Bsods


  • Please log in to reply
13 replies to this topic

#1 Odjn

Odjn

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 07 June 2008 - 09:41 PM

Hi all! I came here about a year ago and you guys helped me fix my virus problem really fast, so I was hoping for some help again!

A few months ago (around August) I installed a new PSU and video card into my computer. After that, every once in a while I would get a BSOD. Not often, maybe once every two weeks. I didn't really let it bother me since it happened so infrequently. However, I have noticed sometimes it happens two or three times in a row. It will happen even if I'm not really doing anything on my computer...maybe just listening to music or browsing the web. I can remember getting two different error messages, but this is the one that happens the most:

win32k.sys - Address BF808BF5 base at BF800000. date stamp 47e0e106

Here's my current set up:

WinXP SP3
Dell Dimension e510 <--most of my parts are stock, so the defaults that come with this (I have switched out the PSU, video card, and RAM)
Thermaltake TR2 W0070RUC 430W ATX Power Supply 115/ 230 V
EVGA 256-P2-N751-TR GeForce 8600 GT 256MB 128-bit GDDR3 PCI Express x16 SLI Supported Video Card
CORSAIR ValueSelect 2GB (2 x 1GB) 240-Pin DDR2 SDRAM DDR2 533 (PC2 4200) Dual Channel Kit Desktop Memory (Note for the RAM: I currently also have the stock RAM in as well, bringing me up to 3GB. I added this in around February. I ran memtest for about 12 hours with no errors, so I doubt it's the ram)

Sorry I can't remember the exact error message, but if it pops up again I will be sure to edit this post with the full message. I'm hoping that someone sees this and knows what's wrong! If you need me to be more specific please post that as well and I'll do my best.

EDIT: I also ran the "Dell Driver Diagnostic Utility" or something like that, and it told me it found no errors. However, when I generated an error report on the reboot of my system (the automatic one that Windows tells you to make), it popped up with a window saying it was a driver error. I also made sure to delete the old ATI drivers from my old video card using Driver Cleaner Pro, as well as using Driver Cleaner Pro to remove old drivers whenever I update my Nvidia ones.

Edited by Odjn, 08 June 2008 - 08:15 PM.


BC AdBot (Login to Remove)

 


#2 Richard Fu

Richard Fu

  • Members
  • 135 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 AM

Posted 07 June 2008 - 10:41 PM

Can we have a full photo of the BSOD?

#3 Odjn

Odjn
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 07 June 2008 - 10:57 PM

Sure. The next time that it happens I'll take a picture and upload it here. Again, I'm sorry the problem is so vague right now but I wanted to be sure to write it down so I don't forget ask you guys.

#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:56 AM

Posted 08 June 2008 - 07:10 AM

How to locate BSOD error message information: http://www.bleepingcomputer.com/forums/top...tml#entry409491
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 Odjn

Odjn
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 08 June 2008 - 08:33 PM

OK, here's a picture of the blue screen:

http://i25.tinypic.com/wwm7ma.jpg

I can download the debug tools as well, but that's going to take a while...I only have dial up here at home...

Edited by Odjn, 08 June 2008 - 08:35 PM.


#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:56 AM

Posted 09 June 2008 - 06:07 AM

The error message (STOP 0x8e in win32k.sys) is a pretty common error that can occur from malware, faulty/corrupted drivers, or faulty/incompatible hardware.
The first parameter (c00000005) indicates that the error occurred while accessing memory.

The debugging tools may give a better idea of where the error is coming from. But, I've found that enabling Driver Verifier on all unsigned drivers will get better results after the next crash ( http://www.memtest86.com/ )

And, just to be sure, I'd try one of these free, online scans (yes, they'll be a pain on dialup) to be sure that you're not infected.
(Be advised that some of these scanners will pickup things in "quarantine" from other anti-virus programs - so review the results carefully)

http://housecall.trendmicro.com
http://www.pandasecurity.com/homeusers/solutions/activescan/
http://www.kaspersky.com/virusscanner Scan Only - no removal
http://www.bitdefender.com/scan8/ie.html
http://support.f-secure.com/enu/home/ols.shtml
http://us.mcafee.com/root/mfs/default.asp
http://onlinescan.avast.com/
http://ca.com/us/securityadvisor/virusinfo/scan.aspx
http://www.eset.com/onlinescan/

<links compiled on 02/14/2008>
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#7 Odjn

Odjn
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 09 June 2008 - 11:53 PM

OK, I'll try running memtest again while I'm sleeping tonight. As to your last request, I run Norton, Spybot, and Adaware every week, and this problem has been occurring for a few months...so unless it's a particularly nasty bug I think I would have noticed it by now. I'll still take your advice though :thumbsup: (I won't be around to get to the tests until tomorrow at the earliest).

I also enabled Driver Verifier, and I'll post what happens with that the next time I get online.

In the meantime, here's a debug report from my last memory dump (actually occurred just a few hours ago).
EDIT: In my haste I'm pretty sure I clicked the !analyze command twice...so I'm sorry if my debug report has a bunch of redundant information in it!
[codebox]Microsoft Windows Debugger Version 6.9.0003.113 X86
Copyright Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini060908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_qfe.070227-2300
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Mon Jun 9 21:45:59.390 2008 (GMT-5)
System Uptime: 0 days 3:14:09.187
Loading Kernel Symbols
............................................................................................................................................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf808bf5, b5761834, 0}

Probably caused by : win32k.sys ( win32k!DC::bSetDefaultRegion+82 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf808bf5, The address that the exception occurred at
Arg3: b5761834, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!DC::bSetDefaultRegion+82
bf808bf5 8b830c040000 mov eax,dword ptr [ebx+40Ch]

TRAP_FRAME: b5761834 -- (.trap 0xffffffffb5761834)
ErrCode = 00000000
eax=8931f838 ebx=00000000 ecx=00000000 edx=00000000 esi=e106c008 edi=b57618d4
eip=bf808bf5 esp=b57618a8 ebp=b57618e4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!DC::bSetDefaultRegion+0x82:
bf808bf5 8b830c040000 mov eax,dword ptr [ebx+40Ch] ds:0023:0000040c=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from bf8361de to bf808bf5

STACK_TEXT:
b57618e4 bf8361de 00f9f910 b5761934 bf835baf win32k!DC::bSetDefaultRegion+0x82
b5761924 805409ac 76011528 00000003 00f9f920 win32k!GreRestoreDC+0x28a
b5761924 7c90eb94 76011528 00000003 00f9f920 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f9f920 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!DC::bSetDefaultRegion+82
bf808bf5 8b830c040000 mov eax,dword ptr [ebx+40Ch]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!DC::bSetDefaultRegion+82

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 47e0e106

FAILURE_BUCKET_ID: 0x8E_win32k!DC::bSetDefaultRegion+82

BUCKET_ID: 0x8E_win32k!DC::bSetDefaultRegion+82

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf808bf5, The address that the exception occurred at
Arg3: b5761834, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!DC::bSetDefaultRegion+82
bf808bf5 8b830c040000 mov eax,dword ptr [ebx+40Ch]

TRAP_FRAME: b5761834 -- (.trap 0xffffffffb5761834)
ErrCode = 00000000
eax=8931f838 ebx=00000000 ecx=00000000 edx=00000000 esi=e106c008 edi=b57618d4
eip=bf808bf5 esp=b57618a8 ebp=b57618e4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!DC::bSetDefaultRegion+0x82:
bf808bf5 8b830c040000 mov eax,dword ptr [ebx+40Ch] ds:0023:0000040c=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from bf8361de to bf808bf5

STACK_TEXT:
b57618e4 bf8361de 00f9f910 b5761934 bf835baf win32k!DC::bSetDefaultRegion+0x82
b5761924 805409ac 76011528 00000003 00f9f920 win32k!GreRestoreDC+0x28a
b5761924 7c90eb94 76011528 00000003 00f9f920 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f9f920 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!DC::bSetDefaultRegion+82
bf808bf5 8b830c040000 mov eax,dword ptr [ebx+40Ch]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!DC::bSetDefaultRegion+82

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 47e0e106

FAILURE_BUCKET_ID: 0x8E_win32k!DC::bSetDefaultRegion+82

BUCKET_ID: 0x8E_win32k!DC::bSetDefaultRegion+82

Followup: MachineOwner
---------

[/codebox]
EDIT 2: Just rebooted with Driver Verifier running. It booted perfectly normal. Good news or bad news?

Edited by Odjn, 10 June 2008 - 12:14 AM.


#8 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:56 AM

Posted 10 June 2008 - 08:10 AM

Now wait for the next crash :thumbsup: That should let Driver Verifier identify the faulty driver from the dump file of the next crash.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#9 Odjn

Odjn
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 11 June 2008 - 06:33 PM

Long story short, I enabled Driver Verifier to run on all drivers. Besides making my computer take a horridly long time to boot up, nothing unusual happened. So, I /reset DV back to default (although now it's set on unsigned, just in case what you suggested works) and went to shut down my computer. I went to go brush my teeth while my computer was shutting down and when I got back, it had crashed AGAIN. This time, however, it was a different error than any I've gotten before so it's probably something to do with me messing around with DV. I didn't get a picture of the BSOD itself, but here's the error report from when I started up again:
http://i27.tinypic.com/2lb2knt.jpg
Here's the debug from that BSOD:
Microsoft ® Windows Debugger Version 6.9.0003.113 X86Copyright © Microsoft Corporation. All rights reserved.Loading Dump File [C:\WINDOWS\Minidump\Mini061108-01.dmp]Mini Kernel Dump File: Only registers and stack trace are availableSymbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbolsExecutable search path is: Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatibleProduct: WinNt, suite: TerminalServer SingleUserTSBuilt by: 2600.xpsp_sp2_qfe.070227-2300Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700Debug session time: Wed Jun 11 00:04:12.890 2008 (GMT-5)System Uptime: 0 days 0:05:59.600Loading Kernel Symbols..........................................................................................................................................................Loading User SymbolsLoading unloaded module list...........********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************Use !analyze -v to get detailed debugging information.BugCheck C4, {3c, 190, 8acaa040, 0}Unable to load image SPBBCDrv.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for SPBBCDrv.sys*** ERROR: Module load completed but symbols could not be loaded for SPBBCDrv.sys*** WARNING: Unable to verify timestamp for SYMEVENT.SYS*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYSProbably caused by : SPBBCDrv.sys ( SPBBCDrv+48e4e )Followup: MachineOwner---------1: kd> !analyze -v********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************DRIVER_VERIFIER_DETECTED_VIOLATION (c4)A device driver attempting to corrupt the system has been caught.  This isbecause the driver was specified in the registry as being suspect (by theadministrator) and the kernel has enabled substantial checking of this driver.If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA willbe among the most commonly seen crashes.        Parameter 1 = 0x1000 .. 0x1020 - deadlock verifier error codes.               Typically the code is 0x1001 (deadlock detected) and you can               issue a '!deadlock' KD command to get more information.Arguments:Arg1: 0000003c, ObReferenceObjectByHandle is being called with a bad handle.Arg2: 00000190, bad handle passed in,Arg3: 8acaa040, object type,Arg4: 00000000, 0.Debugging Details:------------------BUGCHECK_STR:  0xc4_3cCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  DRIVER_FAULTPROCESS_NAME:  LEXBCES.EXELAST_CONTROL_TRANSFER:  from 8065779c to 804f9f13STACK_TEXT:  ab5f2b84 8065779c 000000c4 0000003c 00000190 nt!KeBugCheckEx+0x1bab5f2ba4 ac6b9e4e 00000190 10000000 8acaa040 nt!VerifierReferenceObjectByHandle+0x6cWARNING: Stack unwind information not available. Following frames may be wrong.ab5f2c0c ac67d9a3 80000c34 00000190 ab5f2c34 SPBBCDrv+0x48e4eab5f2c44 ac681fef ab5f2c70 ab5f2cec 8fa7efc0 SPBBCDrv+0xc9a3ab5f2c60 ac6832e7 ab5f2c70 8faf8fe8 ac6cf160 SPBBCDrv+0x10fefab5f2ca4 ad21799d 8fa7efc0 ab5f2cf4 ab5f2cd4 SPBBCDrv+0x122e7ab5f2cb4 ad219e3a ab5f2cf4 00000000 8fa3efd0 SYMEVENT+0xf99dab5f2cd4 ad21c591 ab5f2cec 8fb1afd0 ab5f2d64 SYMEVENT+0x11e3aab5f2d54 805409ac 00000190 011bfb3c 011bfb34 SYMEVENT+0x14591ab5f2d54 008a7fb0 00000190 011bfb3c 011bfb34 nt!KiFastCallEntry+0xfc0000003b 00000000 00000000 00000000 00000000 0x8a7fb0STACK_COMMAND:  kbFOLLOWUP_IP: SPBBCDrv+48e4eac6b9e4e ??              ???SYMBOL_STACK_INDEX:  2SYMBOL_NAME:  SPBBCDrv+48e4eFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: SPBBCDrvIMAGE_NAME:  SPBBCDrv.sysDEBUG_FLR_IMAGE_TIMESTAMP:  46c607f1FAILURE_BUCKET_ID:  0xc4_3c_SPBBCDrv+48e4eBUCKET_ID:  0xc4_3c_SPBBCDrv+48e4eFollowup: MachineOwner---------


#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:56 AM

Posted 12 June 2008 - 09:15 AM

Driver Verifier is blaming your Lexmark printer software is causing this ( http://www.bleepingcomputer.com/startups/L...S.EXE-7634.html )
Uninstalling it and reinstalling a freshly downloaded copy should fix the situation.

The error also involved your Symantec/Norton Firewall ( http://www.bleepingcomputer.com/startups/SPBBCDrv-18018.html ).
If the first fix doesn't stop this, then I'd have to suggest uninstalling the Symantec/Norton programs on your system with the Norton Removal Tool (google for the version that applies to your version of the products). Then, either use some of the freeware applications listed here ( http://www.bleepingcomputer.com/forums/topic3616.html ) or reinstall a freshly downloaded copy of your Symantec/Norton product (I'd go with the freeware stuff - I've seen too many problems with the Symantec/Norton programs).

PS - I'd run verifier.exe again and select "Delete all settings". This'll stop Driver Verifier from running on your system - so it won't slow it down.

Edited by usasma, 12 June 2008 - 09:17 AM.
added PS

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#11 Odjn

Odjn
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 12 June 2008 - 07:49 PM

I'm perfectly fine with installing a freeware virus protection program (for example, I've heard good things about AVG). Unfortunately, I still have about three months left on my Norton subscription (for some reason, my computer illiterate family thinks they know more about computer programs than I do...). So, I can't quite justify removing Norton just yet. Anyway, I will try reinstalling the printer software and see if that does the fix (and if not then the Norton stuff). Thanks for your help...I hope this fixes it and if not I'm sure you'll be hearing for me again! You guys are so helpful :thumbsup:

#12 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:56 AM

Posted 13 June 2008 - 05:07 AM

Use Add/Remove Programs in Control Panel to remove it. Then use the link on this page ( http://cubicspot.blogspot.com/2006/07/lexm...removal-is.html ) to remove the additional Lexmark Services. The link to the "RemoveLexmark.bat" file is a direct download.

I haven't used the file myself, but I have reviewed the contents of the batch file and it doesn't do anything harmful (you can do this by downloading the file, then right click on it and select "Edit"). Don't forget to reboot after the program runs.

Good luck!
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#13 Odjn

Odjn
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:08:56 AM

Posted 18 June 2008 - 12:26 AM

SO.

I thought I removed everything Lexmark related (used that tool you linked to me) and I uninstalled Norton (I'm trying out ESET, seems pretty nice so far). Everything went well for a few days, left my computer running with no crashes, etc.

However, in the past two days the crashes have started to come back. Sigh.

[codebox]
Microsoft ® Windows Debugger Version 6.9.0003.113 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini061808-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_qfe.070227-2300
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Wed Jun 18 00:11:54.343 2008 (GMT-5)
System Uptime: 0 days 12:38:21.274
Loading Kernel Symbols
.................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 0, b4bd3cf0, 0}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 00000000, The address that the exception occurred at
Arg3: b4bd3cf0, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
+0
00000000 ?? ???

TRAP_FRAME: b4bd3cf0 -- (.trap 0xffffffffb4bd3cf0)
ErrCode = 00000010
eax=00000001 ebx=bf80ed51 ecx=bf80ed98 edx=00000000 esi=0013fb84 edi=b4bd3d64
eip=00000000 esp=b4bd3d64 ebp=00000091 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210246
00000000 ?? ???
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: firefox.exe

LAST_CONTROL_TRANSFER: from 00000000 to 00000000

STACK_TEXT:
b4bd3d60 00000000 00000000 00000002 00000000 0x0


STACK_COMMAND: .trap 0xffffffffb4bd3cf0 ; kb

SYMBOL_NAME: ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME: Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP: 0

BUCKET_ID: BAD_STACK

Followup: MachineOwner
---------

[/codebox]
Really, I appreciate all that you're doing to help out. I just want to see this obnoxious error crushed once and for all.

#14 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:56 AM

Posted 18 June 2008 - 07:27 PM

The dump file is "inconclusive" - it just didn't have enough info to figure it out, but it still maintains that it's a driver issue (even though it cites Firefox.exe as the cause). The exact error was that it asked for information from an non-existent memory location.

Is driver verifier still enabled? If not, then I'd suggest enabling it.

Otherwise I'd have to suggest updating most of your drivers to ensure that you've got fresh, uncorrupted copies on your system. Here's a link to the Dell drivers page: http://support.dell.com/support/downloads/...tid=&impid=

Skip the Dell video drivers and download yours directly from nVidia at this link: http://www.nvidia.com/object/winxp_175.16_whql.html

And here's a Dell article on the order to install the drivers in: http://support.dell.com/support/topics/glo...;l=en&s=gen
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users