Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Puter Keeps Crashing


  • Please log in to reply
22 replies to this topic

#1 myris

myris

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 02 September 2008 - 09:44 AM

This is my first time using this forum so please be gentle. I'm not very computer savvy, so again, please be gentle and remember I'm a grandmother and things have to be explained in simplest terms possible *s*

I use XP and the computer is about 4 years old. Recently I made some changes, namely trying to remove Norton Virus from my system and installing Avast, supposedly a smaller program which works better. My first aggravation came when Norton would not uninstall properly or completely. I ran the uninstall, but that left some files, so i went into the install/uninstall file on the Control Panel and tried deleting all symantec programs that were showing. It still kept showing as being on my computer, though the files seemed to be gone in the Control Panel. What also was gone was the install/uninstall feature in the Control Panel itselt. It still shows the programs I have on my computer, but there is no longer a thingy to click to uninstall...on ANY program listed. Fine. So I installed Perfect Uninstaller which gave me the ability to uninstall programs again, but once again, Norton is not there yet the program is running in the background and there is still the icon on the bottom bar. I was advised to then go right to the symantec site and find the program they provide for people who have trouble erradicating Norton from their systems. I downloaded that, but when I tried to run it, it told me I had to uninstall Norton Utilities first. Great, cept that Norton Utilities does not show up in either my list of programs on the Control Panel, or in the Perfect Uninstaller. Added to that, I was now getting an annoying message box popping up every time I tried to open a new window that said:
This msi must be launched through setup
follwed by: Please wait while Windows configures ccCommon

the ccCommon file could not be found, since it belonged to the part of Norton that was removed in the initial uninstall

Then, I was advised to download the service pack, which I did, and it did take care of the frequency with which the annoying ccCommon thing pops up, reducing it from every time I tried to open a new window or start a new program, to now maybe once or twice at infrequent intervals.

However, now a new problem has cropped up, and I don't know if the two are related, but....

If the computer runs for any length of time and goes into idle mode, nine times out of ten it crashes and restarts and I get a message saying the computer has recovered from a serious error.

When I click on the *log details* button, it tells me this:
error signature: BCCode : 1000000a BCP1 : FFDFEFFC BCP2 : 00000002 BCP3 : 00000000 BCP4 : 80532D72 OSVer : 5_1_2600 SP : 3_0 Product : 768_1

and when I click on *details again* it tells me this:
the following files will be included in this error report....C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WERbad5.dir00\Mini090108-01.dmp C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WERbad5.dir00\sysdata.xml

BUT...
Its not always the same "details" that come up in the log from the crash. The time before the one above, it was this....

error signature...BCCode : 1000008e BCP1 : 80000004 BCP2 : F77C4D30 BCP3 : 80550DDC BCP4 : 00000000 OSVer : 5_1_2600 SP : 3_0 Product : 768_1
the following files will be included in this error report....C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WERa56c.dir00\Mini083108-03.dmp C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WERa56c.dir00\sysdata.xml


and the time before that...

error signature...BCCode : 1000000a BCP1 : FFDFEFFC BCP2 : 00000002 BCP3 : 00000000 BCP4 : 80532D72 OSVer : 5_1_2600 SP : 3_0 Product : 768_1
the following files will be included in this error report.... C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WER5f32.dir00\Mini083108-01.dmp C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WER5f32.dir00\sysdata.xml

I'm hoping someone can make sense out of all this *weak smile*. Help!

Myris

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:12:20 PM

Posted 02 September 2008 - 10:41 AM

First, remember that Norton must be turned off to remove, so have Avast already downloaded to Desktop for installation after removal. Doing it in Safemode is even better. You need to run the Norton Removal Tool.
Download from here:
http://service1.symantec.com/Support/tsgen...005033108162039

Edited by garmanma, 02 September 2008 - 10:46 AM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 02 September 2008 - 11:29 AM

Garmanma...


Thank you for the fast reply...however....part of my problem is that the Norton removal thing you sent me (and I downloaded it) will not run until I remove Norton Utilities. But I can't seem to remove Norton Utillities because it doesn't show up on my Perfect Uninstaller as a program, or on my Control Panel list of programs (which wouldn't do me any good as I no longer have a function to add or remove programs through that file) , nor does the Utilities thingy on my program list have anything in the dropdown box that says UNINSTALL. But it is there and it still works.


*sighs*

Myris

#4 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:12:20 PM

Posted 02 September 2008 - 11:49 AM

Try doing a search for the program folder and look for an uninstaller in there
Also have a look here:
http://service1.symantec.com/support/nsw.n...001101612274407
http://www.bleepingcomputer.com/forums/t/42247/how-to-completely-remove-norton-security-products/

Edited by garmanma, 02 September 2008 - 11:54 AM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#5 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 02 September 2008 - 04:16 PM

Garmanma

Whew...okay...managed to remove Utilities and got the Norton thing to (hopefully) uninstall all the leftover Norton files and so far, haven't crashed or seen the pop up message, so THANK YOU very much. I guess the real test will be tonight if I leave the puter on overnight and it doesn't crash.

Myris

#6 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 02 September 2008 - 04:26 PM

*sighs* spoke too soon...it just crashed again.

The system has recovered from a serious error

Error signature.... BCCode : 1000008e BCP1 : C0000005 BCP2 : 0000007B BCP3 : F08898D8
BCP4 : 00000000 OSVer : 5_1_2600 SP : 3_0 Product : 768_1

The following files will be included in this error report:

C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WERe9b9.dir00\Mini090208-02.dmp
C:\DOCUME~1\MARSHA~1\LOCALS~1\Temp\WERe9b9.dir00\sysdata.xml

Sighs like only a grandmother can.


Myris

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:20 PM

Posted 02 September 2008 - 05:31 PM

I'd suggest searching your hard drive for files ending in .dmp (and be sure to include hidden and system files in the Advanced search options). Once you find them, copy the most recent 2 or 3 to your desktop.

Then, use this link to perform an analysis of the latest one: http://forums.majorgeeks.com/showthread.php?t=35246
Copy and paste the results into your next post and we'll have a try at seeing what's causing it.

FWIW - the memory occurred when a program/driver tried to access memory. And, in this case, it tried to access memory that it wasn't allowed to. Once we find the driver that caused it, we can remove it to see if it works - and then can replace it with a new copy that shouldn't crash on you.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 02 September 2008 - 11:07 PM

usasma....


OMG....I found the dmp files...found the latest one, moved it to my desktop, then followed the link you gave and just sat and stared at what they wanted me to do. And stared. My god... I'm NOT a techie and that looks all Greek to me, let alone geek. I just don't think I have the savvy to follow all those instructions without getting hopeless, helplessly lost. Do you KNOW how intimidating all that looks if you don't know what you're doing?

*sighs*

#9 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:20 PM

Posted 03 September 2008 - 04:39 PM

Yes, it does look intimidating - but just follow the instructions step-by-step and you'll be fine. FWIW - it was intimidating the first time that I tried it also.

It's actually a 3 step process:
1) Download and install the Debugging Tools
2) Enter the symbol file in the proper place
3) Analyze the dump file by dragging it into the open Debugging Tools window, Then, when it finishes, click on the "!analyze -v" link to get more info.

Then it's just copy and paste to here so we can have a look at it.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#10 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 03 September 2008 - 11:19 PM

usasma...

Okay, girded my loins and followed the steps...got this in the debugging screen thing, but I don't know what it means or what to do with it


Microsoft ® Windows Debugger Version 6.9.0003.113 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Program Files\Debugging Tools for Windows (x86)\New Folder\Mini090308-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp.080413-2111
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Wed Sep 3 18:34:22.224 2008 (GMT-4)
System Uptime: 0 days 0:00:23.804
Loading Kernel Symbols
....................................................................................................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {a, 0, 0, 0}

Probably caused by : ntoskrnl.exe ( nt!KiExceptionExit+ab )

Followup: MachineOwner
---------

#11 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 03 September 2008 - 11:25 PM

usasma...

Hmmm...checked the dmp files and it actually crashed three times while I was out today and automatically restarted... the previous file check was for the third .dmp file...

this one is for the first time it crashed today...


Microsoft ® Windows Debugger Version 6.9.0003.113 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Program Files\Debugging Tools for Windows (x86)\New Folder (2)\Mini090308-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp.080413-2111
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Wed Sep 3 18:01:00.762 2008 (GMT-4)
System Uptime: 1 days 1:05:17.458
Loading Kernel Symbols
......................................................................................................................................
Loading User Symbols
Loading unloaded module list
.........................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {ffdfeffc, 2, 0, 80532d72}

Probably caused by : Pool_Corruption ( nt!ExFreePool+f )

Followup: Pool_corruption

#12 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 03 September 2008 - 11:28 PM

And this was for crash number two...the .dmp file




Microsoft ® Windows Debugger Version 6.9.0003.113 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Program Files\Debugging Tools for Windows (x86)\New Folder (3)\Mini090308-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp.080413-2111
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Wed Sep 3 18:15:17.968 2008 (GMT-4)
System Uptime: 0 days 0:14:49.549
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {ffdfeffc, 2, 0, 80532d72}

Probably caused by : Pool_Corruption ( nt!ExFreePool+f )

Followup: Pool_corruption

#13 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 03 September 2008 - 11:57 PM

*grumbles* warned you I wasn't good at this...I forgot to click the analyzev thingy for each dmp sooooo


for crash number 3, which was the first one I posted....(put them in order of posts made)


kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000a, EXCEPTION_INVALID_TSS
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_a

CUSTOMER_CRASH_COUNT: 4

DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

PROCESS_NAME: logonui.exe

LAST_CONTROL_TRANSFER: from 7c90e4f4 to 804df107

STACK_TEXT:
f2575974 7c90e4f4 badb0d00 0007fc70 0000003b nt!KiExceptionExit+0xab
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007fc64 7c90df2c 7c809574 00000002 0007fc90 0x7c90e4f4
0007fd04 7e4195f9 00000002 0007fd2c 00000000 0x7c90df2c
0007fd60 6c1e4b52 00000001 0007fd94 00000000 0x7e4195f9
0007fd80 6c1e4d9c 000004ff 00000000 00000001 0x6c1e4b52
0007fdb4 6c1e4e8e 0007fdf4 00000000 00000000 0x6c1e4d9c
0007fdd4 7e41ec76 0007fdf4 00000000 00000000 0x6c1e4e8e
0007fe1c 7c90e453 0007fe2c 00000014 00000000 0x7e41ec76
0007fe5c 010177ce 0007fe7c 00000000 00000000 0x7c90e453
0007fe98 0100b672 7c80b731 000a231c 00000000 0x10177ce
0007ffd0 8054b6b8 0007ffc8 827ffda8 ffffffff 0x100b672
0007ffd0 00000000 0007ffc8 827ffda8 ffffffff nt!ExFreePoolWithTag+0x676


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiExceptionExit+ab
804df107 cf iretd

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!KiExceptionExit+ab

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 48025eab

FAILURE_BUCKET_ID: 0x7f_a_nt!KiExceptionExit+ab

BUCKET_ID: 0x7f_a_nt!KiExceptionExit+ab

Followup: MachineOwner
---------







For crash number ONE in the followup post.....


Followup: Pool_corruption
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffdfeffc, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 80532d72, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: ffdfeffc

CURRENT_IRQL: 2

FAULTING_IP:
nt!KeBugCheck2+c8
80532d72 f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: Idle

LAST_CONTROL_TRANSFER: from 8053380e to 80532d72

STACK_TEXT:
80550d54 8053380e 000000c2 00000007 00000cd4 nt!KeBugCheck2+0xc8
80550d74 8054c4c1 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
80550dc4 8054be39 827f2880 00000000 80550e40 nt!ExFreePoolWithTag+0x2be
80550dd4 f7c241a1 827f2880 82b01008 827f2880 nt!ExFreePool+0xf
80550e40 f7c24d47 82a4a3bc 00000000 82a957d8 USBPORT!USBPORT_CompleteTransfer+0x43f
80550e70 f7c25944 026e6f44 82a950e0 82a950e0 USBPORT!USBPORT_DoneTransfer+0x137
80550ea8 f7c2713a 82a95028 804e2eb4 82a95230 USBPORT!USBPORT_FlushDoneTransferList+0x16c
80550ed4 f7c3524b 82a95028 804e2eb4 82a95028 USBPORT!USBPORT_DpcWorker+0x224
80550f10 f7c353c2 82a95028 00000001 80559c20 USBPORT!USBPORT_IsrDpcWorker+0x38f
80550f2c 804dbbd4 82a9564c 6b755044 00000000 USBPORT!USBPORT_IsrDpc+0x166
80550f40 805599c0 ffdffc50 00000000 00000000 nt!KiRetireDpcList+0x46
80550f50 804dbb4d 00000000 0000000e 00000000 nt!KiIdleThread0
80550f54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x26


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePool+f
8054be39 5d pop ebp

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!ExFreePool+f

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: 0xA_nt!ExFreePool+f

BUCKET_ID: 0xA_nt!ExFreePool+f

Followup: Pool_corruption
---------






and for crash number TWO....



Followup: Pool_corruption
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffdfeffc, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 80532d72, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: ffdfeffc

CURRENT_IRQL: 2

FAULTING_IP:
nt!KeBugCheck2+c8
80532d72 f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: Idle

LAST_CONTROL_TRANSFER: from 8053380e to 80532d72

STACK_TEXT:
80550d54 8053380e 000000c2 00000007 00000cd4 nt!KeBugCheck2+0xc8
80550d74 8054c4c1 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
80550dc4 8054be39 827d9ac0 00000000 80550e40 nt!ExFreePoolWithTag+0x2be
80550dd4 f6e431a1 827d9ac0 829984c8 827d9ac0 nt!ExFreePool+0xf
80550e40 f6e43d47 82a74734 00000000 82a447d8 USBPORT!USBPORT_CompleteTransfer+0x43f
80550e70 f6e44944 026e6f44 82a440e0 82a440e0 USBPORT!USBPORT_DoneTransfer+0x137
80550ea8 f6e4613a 82a44028 804e2eb4 82a44230 USBPORT!USBPORT_FlushDoneTransferList+0x16c
80550ed4 f6e5424b 82a44028 804e2eb4 82a44028 USBPORT!USBPORT_DpcWorker+0x224
80550f10 f6e543c2 82a44028 00000001 80559c20 USBPORT!USBPORT_IsrDpcWorker+0x38f
80550f2c 804dbbd4 82a4464c 6b755044 00000000 USBPORT!USBPORT_IsrDpc+0x166
80550f40 805599c0 ffdffc50 00000000 00000000 nt!KiRetireDpcList+0x46
80550f50 804dbb4d 00000000 0000000e 00000000 nt!KiIdleThread0
80550f54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x26


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePool+f
8054be39 5d pop ebp

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!ExFreePool+f

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: 0xA_nt!ExFreePool+f

BUCKET_ID: 0xA_nt!ExFreePool+f

Followup: Pool_corruption
---------

#14 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:20 PM

Posted 04 September 2008 - 08:04 AM

See, you did it! Great job! It gives me enough to go on so we can get started....

In order of posting:
- the first one (your #3) shows errors with core Windows components and their accessing of memory. This article shows the common causes: http://aumha.org/a/stop.php#0x7f (which seems to call for a memory test - more on this later)
- the second one (your #1) shows a corruption of the memory pools after usage by your USB ports. This article shows more information about that error: http://aumha.org/a/stop.php#0x0a
- the third one (your #2) shows essentiall the same thing as the second one (your #1)

From your previous posts it appears that these were all generated on the same day - so it's likely that they're related.

Here's what to do to start fixing it:
1) First, run this free, bootable memory test: http://www.memtest86.com/ Read the directions carefully as it requires that you make a boot disk/CD to run it. Let the test run for at least 3 passes (but overnight is better). If it starts giving errors, stop the test and post back here.
2) If it passes the test, then we'll have to investigate the actual driver that's causing this error. To do that, we'll have to enable Driver Verifier. Here's how to do that:

- Go to Start...Run...and type in "verifier.exe" (without the quotes) and press Enter.
- Click Next on the first screen to "Create standard settings"
- Click Next on the next screen to "Automatically accept unsigned drivers"
- Click on Finish to accept "The list of unsigned drivers chosen to be verified"

Then read the following before rebooting :thumbsup:

When you enable Driver Verifier, it loads routines that will force the system to crash. It'll either crash immediately on reboot - or it will crash a while later. If it crashes immediately, you'll have to access the system by using Safe Mode (by pressing F8 just before the Windows splash screen shows up).

Then, you'll have to look for the .dmp file that the crash generated. If it's there, then you can (and should) disable Driver Verifier while in Safe Mode. To do this:
- Go to Start...Run...and type in "verifier.exe" (without the quotes) and press Enter.
- Click on "Delete existing settings" and then click on Finish to accept that choice.

If you're able to get into normal mode before the system crashes you can disable Driver Verifier from there.

Finally, we only select unsigned drivers because they're the most likely to cause problems - although further settings adjustments may be necessary if the .dmp file doesn't reveal the problem driver. But we don't want to just verify all drivers - as this will slow the system to a crawl.

** OK - you can reboot now! :flowers:

Let us know if it was an immediate crash, or if it takes a while. And perform the analysis and post the results
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#15 myris

myris
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:12:20 PM

Posted 04 September 2008 - 08:37 AM

*sighs and gives you a grandmotherly smile*

I can't do all that. Not a chance. I don't know anything about starting in safe modes or disabling things or "if I'm able to get into normal mode" before it crashes, or making boot disks.

Thank you anyway for trying to help. I guess I'll just have to live with the crashes until I can afford a new computer.

Ty again.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users