Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD w/Minidump report


  • Please log in to reply
17 replies to this topic

#1 bigadatank

bigadatank

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 16 April 2010 - 09:29 AM

Good morning,

I have had reoccuring BSODs and needs some help. The BSODs are sporadic, happen while using Internet Explorer, just in Microsoft Word, or just sitting there "idle". Recently, I have also been getting a series of one short beep and one long beep...this just started to occur within the last week. I have an HP computer running Vista 32 bit and have scanned for malware using several programs with nothing being reported.
Any help would be appreciated!!

I have attached the Minidump Report from the latest BSOD as well as provided it below:

Thank you in advance for your help!


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.minidump report

Loading Dump File [C:\Windows\Minidump\Mini041510-11.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18209.x86fre.vistasp2_gdr.100218-0019
Machine Name:
Kernel base = 0x8281d000 PsLoadedModuleList = 0x82934c70
Debug session time: Thu Apr 15 23:10:40.587 2010 (GMT-5)
System Uptime: 0 days 0:01:42.259
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 82862fbc, 817cc28b, 0}
Unable to load image \SystemRoot\System32\Drivers\aswFsBlk.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswFsBlk.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswFsBlk.SYS
Probably caused by : memory_corruption
Followup: memory_corruption
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82862fbc, The address that the exception occurred at
Arg3: 817cc28b, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!memmove+bc
82862fbc 3086829023d1 xor byte ptr [esi-2EDC6F7Eh],al
TRAP_FRAME: 817cc28b -- (.trap 0xffffffff817cc28b)
ErrCode = 00000002
eax=00000000 ebx=85278d22 ecx=00000000 edx=00000002 esi=acc9bc4a edi=85279d5c
eip=82862fbc esp=817cc2ff ebp=817cc308 iopl=0 nv up ei ng nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296
nt!memmove+0xbc:
82862fbc 3086829023d1 xor byte ptr [esi-2EDC6F7Eh],al ds:0023:7ded4ccc=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 11
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x8E
PROCESS_NAME: Mcshield.exe
CURRENT_IRQL: 0
UNALIGNED_STACK_POINTER: 817cc2ff
LAST_CONTROL_TRANSFER: from 8285a9f7 to 82862fbc

STACK_TEXT:
817cc308 8285a9f7 85279d22 acc9bc10 0000002c nt!memmove+0xbc
817cc328 807b5ee3 85279ce0 0000003c 00000000 nt!RtlAppendUnicodeStringToString+0x43
817cc34c 807b6721 8526c850 8526c840 817cc378 fltmgr!FltpGetFileNameFromFileObject+0x1cf
817cc35c 807b3a08 8526c850 89e46bb0 8526c850 fltmgr!FltpGetOpenedFileName+0x49
817cc378 807b419d 8526c850 89e46bb0 8526c850 fltmgr!FltpCallOpenedFileNameHandler+0x8a
817cc390 8079ee3b 8526c850 00000000 8526c850 fltmgr!FltpCreateFileNameInformation+0x79
817cc3b0 8079ef88 87a058dc 00000000 00000000 fltmgr!HandleStreamListNotSupported+0x125
817cc3e0 8079f654 c00000ab 88cee0a8 89de8388 fltmgr!FltpGetFileNameInformation+0xc6
817cc408 9009f898 00e46bb8 00000102 817cc428 fltmgr!FltGetFileNameInformation+0x120
817cc424 807b39cd 88b763e8 89eb8f80 89e46bb8 luafv!LuafvGenerateFileName+0x55
817cc454 807b6760 89de8388 89e46bb0 89de8388 fltmgr!FltpCallOpenedFileNameHandler+0x4f
817cc470 807b6f0b 89de8388 89e46bb0 8a182144 fltmgr!FltpGetNormalizedFileNameWorker+0x6
817cc488 807b41a5 89de8388 89e46bb0 89de8388 fltmgr!FltpGetNormalizedFileName+0x19
817cc4a0 8079ee3b 89de8388 00000000 89de8388 fltmgr!FltpCreateFileNameInformation+0x81
817cc4c0 8079ef88 87a058c0 00000000 00000000 fltmgr!HandleStreamListNotSupported+0x125
817cc4f0 8079f654 c00000ab 817cc540 817cc584 fltmgr!FltpGetFileNameInformation+0xc6
817cc518 900dda34 00e46bb8 00000101 817cc52c fltmgr!FltGetFileNameInformation+0x120
WARNING: Stack unwind information not available. Following frames may be wrong.
817cc560 900dd7e5 817cc5a0 89e46bb8 817cc584 aswFsBlk+0x1a34
817cc590 80799809 00120181 817cc5b0 817cc5d0 aswFsBlk+0x17e5
817cc5ec 8079bff8 817cc62c 00000000 88de0dbc fltmgr!FltpPerformPreCallbacks+0x2e5
817cc600 807aefc0 817cc62c 807ad88c 00000000 fltmgr!FltpPassThroughInternal+0x32
817cc614 807af621 817cc62c 88de0c08 89893c64 fltmgr!FltpCreateInternal+0x24
817cc658 828619c6 87a01160 87a055d0 89eb8fdc fltmgr!FltpCreate+0x27f
817cc670 82a5c195 62a8de03 89db2394 8704ec18 nt!IofCallDriver+0x63
817cc684 828593a5 110f4a1f 817cc6a8 00000000 nt!IopParseDevice+0xf61
00000000 00000000 00000000 00000000 00000000 nt!PfLogFileDataAccess+0xf4
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -db !nt
2 errors : !nt (82862ed8-82862fb8)
82862ed0 90 90 90 90 90 90 90 90 *80 90 90 90 90 90 90 90 ................
...
82862fb0 02 83 f9 08 72 a6 f3 a5 *ef 24 95 4c 30 86 82 90 ....r....$.L0...
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: STRIDE
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_STRIDE
BUCKET_ID: MEMORY_CORRUPTION_STRIDE
Followup: memory_corruption
---------[/b]

Attached Files



BC AdBot (Login to Remove)

 


#2 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:01:32 AM

Posted 16 April 2010 - 01:17 PM

Well, the dump points to a "memory corruption" of sorts...never actually mentioned a file like normal.

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Since your dump said memory corruption, the first logical thing to test your RAM.

***** A. If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...

1. Download - Pre-Compiled Bootable ISO (.zip)
2. Unzip downloaded memtest86+-....iso.zip file.
3. Inside, you'll find memtest86+-....iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:

Posted Image

8. Locate memtest86+-....iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:

Posted Image

10. Once the CD is created, boot from it, and memtest will automatically start to run.

The running program will look something like this depending on the size and number of ram modules installed:


Posted Image

It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.

Posted Image

The following image is the test results area:

Posted Image

The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#3 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 16 April 2010 - 05:25 PM

Here is the infromation that you requested...thanks for taking an interest in helping me!

I am not sure how many RAM modules I have or how to check...will Google your "A" recommendation and see what I can find out.

Thank you!

==================================================
Dump File : Mini041610-01.dmp
Crash Time : 4/16/2010 4:58:21 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x040a0016
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x828ba45d
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+1f63
File Description : Microsoft Filesystem Filter Manager
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041610-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-11.dmp
Crash Time : 4/15/2010 11:12:28 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x82862fbc
Parameter 3 : 0x817cc28b
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+45fbc
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-11.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-10.dmp
Crash Time : 4/15/2010 11:09:29 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x040a001a
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x8287632f
Caused By Driver : hal.dll
Caused By Address : hal.dll+997f
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-10.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-09.dmp
Crash Time : 4/15/2010 11:07:17 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x82884fbd
Parameter 3 : 0xa91b0af7
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+45fbd
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-09.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-08.dmp
Crash Time : 4/15/2010 11:04:42 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8287afbe
Parameter 3 : 0xa0d85707
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+45fbe
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-08.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-07.dmp
Crash Time : 4/15/2010 10:59:56 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x00a8078c
Parameter 2 : 0x0000001b
Parameter 3 : 0x00000001
Parameter 4 : 0x830e25ae
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4dfd9
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-07.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-06.dmp
Crash Time : 4/15/2010 9:00:14 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x00000010
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x8281cd8d
Caused By Driver : hal.dll
Caused By Address : hal.dll+ed8d
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-06.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-05.dmp
Crash Time : 4/15/2010 8:57:12 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x00000018
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x828c241d
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4dfd9
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-05.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-04.dmp
Crash Time : 4/15/2010 4:35:51 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x00000004
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x828cac0d
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4dfd9
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-04.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-03.dmp
Crash Time : 4/15/2010 9:39:31 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0xb9f04ceb
Parameter 2 : 0x00000001
Parameter 3 : 0x8285bc7d
Parameter 4 : 0x00000002
Caused By Driver : hal.dll
Caused By Address : hal.dll+770c
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-02.dmp
Crash Time : 4/15/2010 9:35:13 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8289bc71
Parameter 3 : 0xaba7ccf0
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4ac71
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041510-01.dmp
Crash Time : 4/15/2010 8:05:43 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x82867c7c
Parameter 3 : 0xb2bcdce8
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4ac7c
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041510-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041410-03.dmp
Crash Time : 4/14/2010 7:24:56 AM
Bug Check String : ATTEMPTED_WRITE_TO_READONLY_MEMORY
Bug Check Code : 0x000000be
Parameter 1 : 0x993baceb
Parameter 2 : 0x8219f101
Parameter 3 : 0xa05facec
Parameter 4 : 0x0000000b
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+9838d
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041410-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041410-02.dmp
Crash Time : 4/14/2010 7:19:25 AM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0x63637051
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x92f869b8
Caused By Driver : tcpip.sys
Caused By Address : tcpip.sys+719b8
File Description : TCP/IP Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041410-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041410-01.dmp
Crash Time : 4/14/2010 7:11:45 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x82890edd
Parameter 3 : 0xa87beba4
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+255edd
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041410-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041310-04.dmp
Crash Time : 4/13/2010 9:01:56 PM
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
Parameter 1 : 0x001904aa
Parameter 2 : 0x8c3fb650
Parameter 3 : 0x8c3fb34c
Parameter 4 : 0x824b5cbd
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+19fff
File Description : NT File System Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041310-04.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041310-03.dmp
Crash Time : 4/13/2010 8:59:58 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc000001d
Parameter 2 : 0x98791840
Parameter 3 : 0x9f96d9c0
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+c1840
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041310-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041310-02.dmp
Crash Time : 4/13/2010 7:29:46 AM
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
Parameter 1 : 0x001904aa
Parameter 2 : 0x8c3df870
Parameter 3 : 0x8c3df56c
Parameter 4 : 0x8a21206d
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+f06d
File Description : NT File System Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041310-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini041310-01.dmp
Crash Time : 4/13/2010 7:27:24 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8264a225
Parameter 3 : 0xa279d4d8
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+240225
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini041310-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini031210-01.dmp
Crash Time : 3/12/2010 8:28:32 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x01000001
Parameter 3 : 0xa0a58910
Parameter 4 : 0x00000000
Caused By Driver : fileinfo.sys
Caused By Address : fileinfo.sys+6cca
File Description : FileInfo Filter Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini031210-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini030210-04.dmp
Crash Time : 3/2/2010 9:40:58 PM
Bug Check String : PFN_LIST_CORRUPT
Bug Check Code : 0x0000004e
Parameter 1 : 0x00000099
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver :
Caused By Address : +cdb0d
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini030210-04.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini030210-03.dmp
Crash Time : 3/2/2010 9:36:23 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x8252a008
Parameter 2 : 0x00000005
Parameter 3 : 0x00000000
Parameter 4 : 0x81e46560
Caused By Driver : hal.dll
Caused By Address : hal.dll+770c
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini030210-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini030210-02.dmp
Crash Time : 3/2/2010 5:13:48 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x81095a28
Parameter 2 : 0x0000001b
Parameter 3 : 0x00000001
Parameter 4 : 0x81e07fe9
Caused By Driver : hal.dll
Caused By Address : hal.dll+3fe9
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini030210-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini030210-01.dmp
Crash Time : 3/2/2010 5:10:15 PM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0xec7ddf7c
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x86f8e007
Caused By Driver : hal.dll
Caused By Address : hal.dll+997f
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini030210-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini020210-01.dmp
Crash Time : 2/2/2010 8:19:30 AM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x802446e0
Parameter 2 : 0x0000001b
Parameter 3 : 0x00000000
Parameter 4 : 0x81ec65b5
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+1017a
File Description : NT File System Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini020210-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini013010-02.dmp
Crash Time : 1/30/2010 2:12:26 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x8c824ef4
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x81ef6094
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4dfb9
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini013010-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini013010-01.dmp
Crash Time : 1/30/2010 1:19:34 PM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 0x0000000d
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : hal.dll
Caused By Address : hal.dll+997f
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini013010-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini011710-03.dmp
Crash Time : 1/17/2010 12:21:14 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0xe8f18be2
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x81ef5a00
Caused By Driver : hal.dll
Caused By Address : hal.dll+770c
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini011710-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini011710-02.dmp
Crash Time : 1/17/2010 12:09:46 PM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0x8025af8c
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x8e93e3c9
Caused By Driver : 䵹萈�亱訢⳱訡
Caused By Address : 䵹萈�亱訢⳱訡+b04d8
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini011710-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini011710-01.dmp
Crash Time : 1/17/2010 11:34:32 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x977c2198
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+9836d
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\Mini011710-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

#4 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:01:32 AM

Posted 16 April 2010 - 05:31 PM

Ehh..those BSOD dumps could be caused by any number of things. Until I know whether or not it's the RAM, I can't give any other advice.

If you aren't familiar enough or comfortable with removing sticks of RAM, just go ahead with the memtest with all your RAM in there. :huh:

The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.


PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:07:32 AM

Posted 16 April 2010 - 06:05 PM

Try updating your chipset drivers, and other drivers as well.

#6 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 17 April 2010 - 11:51 AM

I ran the memtest and everything seemed to be ok, no errors were detected. I ran HP Hardware Diagnostic Tools and everything passed there as well.

I checked the BIOS and it is the current version. Would I go to my HP update page to make sure all drivers are up to date?

P.S. I found that I have 4 modules of DDR2 SDRAM memory (2) 512MB and (2) 1024 MB

Thank you for your continuing support!


I just ran a stress test using HP Hardware Diagnostic Tools and it went to BSOD both times. Here is the latest BSOD minidump, might have narrowed down the possibilities??



Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini041710-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18209.x86fre.vistasp2_gdr.100218-0019
Machine Name:
Kernel base = 0x82841000 PsLoadedModuleList = 0x82958c70
Debug session time: Sat Apr 17 12:44:53.142 2010 (GMT-5)
System Uptime: 0 days 0:24:08.814
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {4, 2, 0, 828d6c0d}

Probably caused by : memory_corruption ( nt!MiUnlinkFreeOrZeroedPage+23 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 828d6c0d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82978868
Unable to read MiSystemVaType memory at 82958420
00000004

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiUnlinkFreeOrZeroedPage+23
828d6c0d 8b4704 mov eax,dword ptr [edi+4]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: pcdrcpu.p5x

TRAP_FRAME: b08b59f0 -- (.trap 0xffffffffb08b59f0)
ErrCode = 00000000
eax=00000006 ebx=00000002 ecx=00000004 edx=00079642 esi=84546f38 edi=00000000
eip=828d6c0d esp=b08b5a64 ebp=b08b5a74 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MiUnlinkFreeOrZeroedPage+0x23:
828d6c0d 8b4704 mov eax,dword ptr [edi+4] ds:0023:00000004=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 828d6c0d to 8288efd9

STACK_TEXT:
b08b59f0 828d6c0d badb0d00 00079642 02fffae4 nt!KiTrap0E+0x2e1
b08b5a74 828d6ec7 00079642 84adee38 08000000 nt!MiUnlinkFreeOrZeroedPage+0x23
b08b5ab4 828bc14b 00000002 85354460 885b8e38 nt!MiRemoveAnyPage+0x16c
b08b5b18 828bcdc0 853544e8 acc71988 84adee38 nt!MiCopyDataPageToImagePage+0x616
b08b5bbc 828bb669 00000000 12020b4c acc71988 nt!MiResolveMappedFileFault+0x5cc
b08b5c08 828b8bb5 00000000 12020b4c c0090100 nt!MiResolveProtoPteFault+0x3f4
b08b5cd0 828db266 12020b4c acc71988 00000000 nt!MiDispatchFault+0x9a2
b08b5d4c 8288edd4 00000000 12020b4c 00000001 nt!MmAccessFault+0x1fe6
b08b5d4c 7c3598b9 00000000 12020b4c 00000001 nt!KiTrap0E+0xdc
WARNING: Frame IP not in any known module. Following frames may be wrong.
02fff9a4 00000000 00000000 00000000 00000000 0x7c3598b9


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiUnlinkFreeOrZeroedPage+23
828d6c0d 8b4704 mov eax,dword ptr [edi+4]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiUnlinkFreeOrZeroedPage+23

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4b7d1e08

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_nt!MiUnlinkFreeOrZeroedPage+23

BUCKET_ID: 0xA_nt!MiUnlinkFreeOrZeroedPage+23

Followup: MachineOwner
---------

Edited by bigadatank, 17 April 2010 - 01:25 PM.


#7 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 17 April 2010 - 02:39 PM

Made it all the way through the stress test and passed everything.

#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:07:32 AM

Posted 17 April 2010 - 02:53 PM

using mismatched memory configurations can be bad for some systems. Especially OEM's like HP.

#9 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 18 April 2010 - 10:36 PM

What should I do about the mismatched memory configurations? Would resetting everything back to original factory settings/clean install do any good? I am currently running Vista but have an upgrade to 7 available to me. Don't want to upgrade til I get this POS problem resolved though.

What is the best program to use to make sure all drivers/chipsets are current?

Thank you.

#10 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:01:32 AM

Posted 18 April 2010 - 10:54 PM

What should I do about the mismatched memory configurations?

crytodan will have to advise you on that.

As for the drivers, let me know the exact model number for your computer, and I'll find the drivers for you. :huh:

If you don't know your model number, type msinfo32 at the Start Menu and press Enter. Look for System Model.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#11 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:07:32 AM

Posted 18 April 2010 - 11:12 PM

Try to get the same size and speed and same brand as the ram you want in your system.

#12 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 19 April 2010 - 08:32 AM

"As for the drivers, let me know the exact model number for your computer, and I'll find the drivers for you. :huh:"

I am running an HP Pavilion a6242n Desktop PC with 32-bit Vista. I have been to the page below, but not sure how to go about making sure everything is current.

http://h10025.www1.hp.com/ewfrf/wc/softwar...334&lang=en The BIOS is up-to-date running version 5.27

Thank you!

Edited by bigadatank, 19 April 2010 - 10:42 AM.


#13 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:01:32 AM

Posted 19 April 2010 - 01:14 PM

Just download the following drivers and install them:

Realtek High Definition Audio Driver Update
NVIDIA Graphics Driver Update
NVIDIA nForce Serial ATA Controller Driver Update

After installing those drivers, run a System File Check and report back with the results.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#14 bigadatank

bigadatank
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:32 AM

Posted 19 April 2010 - 08:17 PM

Installed the 3 drivers and ran the sfc scan.
Results:
"Windows Resource Protection did not find any integrity violations."

Ran memtest86+ again and it made 7 passes overnight, still no errors.

Any other suggestions...besides a sledge hammer?

Thank you!

Edited by bigadatank, 20 April 2010 - 07:18 AM.


#15 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:01:32 AM

Posted 20 April 2010 - 07:10 PM

Have you still been getting BSOD's?
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users