Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSoD problem


  • Please log in to reply
5 replies to this topic

#1 davidonato

davidonato

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Brazil
  • Local time:10:57 AM

Posted 09 August 2009 - 03:42 PM

Hi, in the last three days I experienced two BSoDs on my home pc. After the last one microsoft response was that I should update the BIOs, as I know updating the BIOs is considered an extreme measure I thought I'd better come here and ask for a second opinion before I end up doing something stupid.

Both crashes happened when the pc was running only an ftp client, a bittorrent client, and a browser. The last hardware change I made was about a month ago, when I installed an old IDE HDD.

One more thing I should say is that I had BSoD problem about an year ago (you can check at this topic if you want), which turn out being a mother board problem, after I changed it to another one everything was ok till now, so I don't think it has anything to do with this new problem.

I'll add here as much information I can. My question is, should I update the BIOs, or should I try something else, or should I simply wait to see if it happens again?


Config
C2D E6550
Intel DG35EC
2x 1GB kingstom 800MHz DDR2
Power Suply: Corsair VX450W
Audio Interface: M-Audio Profire 610
HDDs:
Samsung HD321KJ (320GB, 7200 RPM, SATA-II)
Samsung SP0411N (40GB, 7200 RPM, Ultra-ATA/133)
Seagate ST3500320AS (500GB, 7200 RPM, SATA-II)
Optical Drives:
LG GH20NS15
Samsung SH-S203B

running Windows XP pro sp3



first crash:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 8/7/2009
Time: 2:20:44 PM
User: N/A
Computer: DONATO-DAFCD231
Description:
Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 0000029a, parameter4 836d4f44.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 63 000000c
0020: 32 20 20 50 61 72 61 6d 2 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 37 2c 20 000007,
0038: 30 30 30 30 30 63 64 34 00000cd4
0040: 2c 20 30 30 30 30 30 32 , 000002
0048: 39 61 2c 20 38 33 36 64 9a, 836d
0050: 34 66 34 34 4f44


Posted Image

Posted Image


second crach:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 8/9/2009
Time: 4:24:13 AM
User: N/A
Computer: DONATO-DAFCD231
Description:
Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 8363b484, parameter4 fc02c630.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 63 000000c
0020: 32 20 20 50 61 72 61 6d 2 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 37 2c 20 000007,
0038: 30 30 30 30 30 63 64 34 00000cd4
0040: 2c 20 38 33 36 33 62 34 , 8363b4
0048: 38 34 2c 20 66 63 30 32 84, fc02
0050: 63 36 33 30 c630


Posted Image

Posted Image


microsoft response after the second crash:

http://wer.microsoft.com/responses/Respons...00-3b01099c13f9



I went a step ahead and debugged the minidumps, here it goes:

first crash:

Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini080709-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Fri Aug 7 07:09:25.906 2009 (GMT-3)
System Uptime: 2 days 5:16:27.467
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
............................................................
Loading User Symbols
Loading unloaded module list
........................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 29a, 836d4f44}

Probably caused by : ntoskrnl.exe ( nt!_woutput+414 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 0000029a, Memory contents of the pool block
Arg4: 836d4f44, Address of the block of pool being deallocated

Debugging Details:
------------------


BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from 00000000 to 804f9f43

STACK_TEXT:
ba4f3fd0 00000000 00000000 00000000 00000000 nt!_woutput+0x414


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!_woutput+414
804f9f43 5d pop ebp

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!_woutput+414

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 498c11d3

FAILURE_BUCKET_ID: 0xc2_7_nt!_woutput+414

BUCKET_ID: 0xc2_7_nt!_woutput+414

Followup: MachineOwner
---------



second crash:

Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini080909-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sun Aug 9 04:16:35.703 2009 (GMT-3)
System Uptime: 1 days 13:57:48.256
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
...............................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 8363b484, fc02c630}

GetUlongFromAddress: unable to read from 805637f0
GetUlongFromAddress: unable to read from 805637f0
Probably caused by : ntoskrnl.exe ( nt!_woutput+414 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 8363b484, Memory contents of the pool block
Arg4: fc02c630, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 805637f0
GetUlongFromAddress: unable to read from 805637f0

POOL_ADDRESS: fc02c630

BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from 00000000 to 804f9f43

STACK_TEXT:
ba4fbc88 00000000 000000c2 00000007 00000cd4 nt!_woutput+0x414


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!_woutput+414
804f9f43 5d pop ebp

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!_woutput+414

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 498c11d3

FAILURE_BUCKET_ID: 0xc2_7_nt!_woutput+414

BUCKET_ID: 0xc2_7_nt!_woutput+414

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:57 AM

Posted 09 August 2009 - 04:20 PM

<<Both crashes happened when the pc was running only an ftp client, a bittorrent client, and a browser. The last hardware change I made was about a month ago, when I installed an old IDE HDD.>>

Well...my guess would be malware (based on nothing other than the fact that you run bittorrent clients). Malware is the sort of problem that has to be eliminated by the security practices of the user/owner...or it is (IMO) a constant potential disrupter of system functionality.

AUMHA says:
"0x000000C2: BAD_POOL_CALLER
A kernel-mode process or driver incorrectly attempted to perform memory operations. Typically, a faulty driver or buggy software causes this."

The best I can do is suggest the generic guidance for dealing with STOP errors.

"General Troubleshooting of STOP Messages

Examine the “System” and “Application” logs in Event Viewer for other recent errors that might give further clues. To do this, launch EventVwr.msc from a Run box; or open “Administrative Tools” in the Control Panel then launch Event Viewer.

If you’ve recently added new hardware, remove it and retest.

Run hardware diagnostics supplied by the manufacturer.

Make sure device drivers and system BIOS are up-to-date.

However, if you’ve installed new drivers just before the problem appeared, try rolling them back to the older ones.

Open the box and make sure all hardware is correctly installed, well seated, and solidly connected.

Confirm that all of your hardware is on the Hardware Compatibility List. If some of it isn’t, then pay particular attention to the non-HCL hardware in your troubleshooting.

Check for viruses.

Investigate recently added software.

Examine (and try disabling) BIOS memory options such as caching or shadowing."


EventID 1003, System, Category 102...doesn't reflect anything other than a lot of inconclusive guesswork by various persons, http://www.eventid.net/display.asp?eventid...tem&phase=1

FWIW: People tend to assert that it's a RAM problem only because it's RAM locations where many STOP errors are noted. I would not necessarily rule it out, nor would I commit to that concept.

FWIW: Bit torrent clients employ drivers, as does your browser, your AV, your music-editing program, etc. So having the error identified as a potentially driver-induced error...is not very enlightening, IMO.

Louis

#3 davidonato

davidonato
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Brazil
  • Local time:10:57 AM

Posted 09 August 2009 - 07:44 PM

Well...my guess would be malware (based on nothing other than the fact that you run bittorrent clients).

you mean that the client itself is a problem? cause I thought avoiding suspicious downloads (like keygens, cracks...) it'd be ok.

thanks for the advise, I'll look into the malware section to be sure if I'm infected or not. If that doesn't work I'll try the other steps you mentioned.

Edited by davidonato, 09 August 2009 - 07:45 PM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:57 AM

Posted 10 August 2009 - 09:16 AM

Essentially...anything that has drivers can cause a seemingly driver-related BSOD.

Anything that has files...can suffer damage/corruption.

A corrupted driver (IMO) may often be the cause of BSODs or other driver-related problems...in which case, uninstalling/reinstalling may get rid of the offending file and replace it with one that is not damaged...therefore, will not cause problems.

Louis

#5 davidonato

davidonato
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Brazil
  • Local time:10:57 AM

Posted 23 August 2009 - 01:55 AM

You were right, I updated all my drivers and now everything has been ok and stable for more than a week, I guess that was it.

Thank you for your help :thumbsup:

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:57 AM

Posted 23 August 2009 - 08:48 AM

Glad you resolved it, happy computing :thumbsup:.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users