Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

installed new hard drive, now computer crashes


  • Please log in to reply
7 replies to this topic

#1 goodkat

goodkat

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:42 AM

Posted 22 May 2010 - 09:24 PM

I'm not 100% sure this is the right section since apparently the error is caused by an .exe but this only started happening after my dad installed a new hard drive into my previously perfectly stable computer. It's not a new boot drive, just one I use for storage. Ever since then, my computer has been randomly restarting (usually every other day, my computer runs almost constantly). A message pops up that says "system has recovered from a serious error". I finally got fed up and ran the .dmp file through the windows debugging program and got this.


Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\StoopidKat\Desktop\Mini052210-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.090804-1435
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sat May 22 12:19:13.080 2010 (UTC - 5:00)
System Uptime: 3 days 3:46:45.469
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {e2314910, c000009a, bf919d3d, 4ba60860}

Probably caused by : win32k.sys ( win32k!NtUserHardErrorControl+2e )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: e2314910, lock type that was held (value 1,2,3, or PTE address)
Arg2: c000009a, error status (normally i/o status code)
Arg3: bf919d3d, current process (virtual address for lock type 3, or PTE)
Arg4: 4ba60860, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc000009a - Insufficient system resources exist to complete the API.

BUGCHECK_STR: 0x7a_c000009a

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: csrss.exe

TRAP_FRAME: b8217cc8 -- (.trap 0xffffffffb8217cc8)
ErrCode = 00000010
eax=8a27d7d8 ebx=bf911f30 ecx=00000000 edx=00000000 esi=0059fdc0 edi=b8217d64
eip=bf919d3d esp=b8217d3c ebp=b8217d50 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k!xxxHardErrorControl:
bf919d3d 8bff mov edi,edi
Resetting default scope

LAST_CONTROL_TRANSFER: from 80515b82 to 804f9f43

STACK_TEXT:
b8217b94 80515b82 0000007a e2314910 c000009a nt!KeBugCheckEx+0x1b
b8217bc4 805166ef 823cc280 e2314910 bf919d3d nt!MiWaitForInPageComplete+0x1ca
b8217c44 80520249 e2314910 bf919d3d c05fc8c8 nt!MiDispatchFault+0x2c1
b8217cb0 80544588 00000008 bf919d3d 00000000 nt!MmAccessFault+0x877
b8217cb0 bf919d3d 00000008 bf919d3d 00000000 nt!KiTrap0E+0xd0
b8217d38 bf911f5e 00000000 00000000 00000000 win32k!xxxHardErrorControl
b8217d50 8054162c 00000000 00000000 00000000 win32k!NtUserHardErrorControl+0x2e
b8217d50 7c90e514 00000000 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0059fe7c 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!NtUserHardErrorControl+2e
bf911f5e 8bf0 mov esi,eax

SYMBOL_STACK_INDEX: 6

SYMBOL_NAME: win32k!NtUserHardErrorControl+2e

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4a8564c7

FAILURE_BUCKET_ID: 0x7a_c000009a_win32k!NtUserHardErrorControl+2e

BUCKET_ID: 0x7a_c000009a_win32k!NtUserHardErrorControl+2e

Followup: MachineOwner
---------


Any ideas on how to fix this? I don't know what any of this means except that csrss.exe is what is causing the problem.

The new hard drive is a SATA Seagate Barracuda 1.5 TB. I'm running Windows XP with service pack 3 installed. I've switched out several hard drives and never had a problem like this.

I ran checkdisk on the new drive and my boot drive and didn't find anything. I also checked for fake/excess csrss.exe files, but the only file I found was the legitimate one in the system32 folder (left that alone).

Any help is greatly appreciated!

EDIT: Moved from Internal Hardware to more appropriate XP forum ~ Hamluis.

Edited by hamluis, 23 May 2010 - 05:20 AM.


BC AdBot (Login to Remove)

 


#2 computerxpds

computerxpds

    Bleepin' Comp


  • Moderator
  • 4,457 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:42 AM

Posted 22 May 2010 - 09:28 PM

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

use this and while you are doing it this will be moved to Windows XP :thumbsup:

sigcomp.png 
If I have replied to a topic and you reply and I haven't gotten back to you within 48 hours (2 days) then send me a P.M.
Some important links: BC Forum Rules | Misplaced Malware Logs | BC Tutorials | BC Downloads |
Follow BleepingComputer on: Facebook! | Twitter! | Google+| Come join us on the BleepingComputer Live Chat too! |


#3 goodkat

goodkat
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:42 AM

Posted 22 May 2010 - 10:01 PM

==================================================
Dump File : Mini052210-01.dmp
Crash Time : 5/22/2010 12:20:28 PM
Bug Check String : KERNEL_DATA_INPAGE_ERROR
Bug Check Code : 0x0000007a
Parameter 1 : 0xe2314910
Parameter 2 : 0xc000009a
Parameter 3 : 0xbf919d3d
Parameter 4 : 0x4ba60860
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+119d3d
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5863 (xpsp_sp3_gdr.090814-1258)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052210-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini051910-01.dmp
Crash Time : 5/19/2010 8:33:04 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xfebebb5c
Parameter 2 : 0x00000000
Parameter 3 : 0xb4629822
Parameter 4 : 0x00000000
Caused By Driver : aswSP.SYS
Caused By Address : aswSP.SYS+4822
File Description : avast! self protection module
Product Name : avast! Antivirus System
Company : ALWIL Software
File Version : 4.8.1356.0
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051910-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================


These are the only .dmp files left, but I had a whole cluster of them the other day. I guess my junk file cleaning program erased them.

#4 caperdog

caperdog

  • BC Advisor
  • 954 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Nova Scotia
  • Local time:06:42 AM

Posted 23 May 2010 - 03:06 PM

ive seen hard drives with windows installed boot up even if their jumper settings are wrong and they run erratically. did your dad check the jumpers on the drives when he installed the storage drive (slave). some drives, when in a single drive system, have no jumper but when you add them to a two drive system (master, slave) you have to add a jumper to configure it as master.

i just realized that this is the case for ide drives, is this what you have or are they SATA ?

Edited by caperdog, 23 May 2010 - 03:08 PM.


#5 computerxpds

computerxpds

    Bleepin' Comp


  • Moderator
  • 4,457 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:42 AM

Posted 23 May 2010 - 04:03 PM

i just realized that this is the case for ide drives, is this what you have or are they SATA ?

That should answer you caperdog

The new hard drive is a SATA Seagate Barracuda 1.5 TB. I'm running Windows XP with service pack 3 installed. I've switched out several hard drives and never had a problem like this.


Edited by computerxpds, 23 May 2010 - 04:03 PM.

sigcomp.png 
If I have replied to a topic and you reply and I haven't gotten back to you within 48 hours (2 days) then send me a P.M.
Some important links: BC Forum Rules | Misplaced Malware Logs | BC Tutorials | BC Downloads |
Follow BleepingComputer on: Facebook! | Twitter! | Google+| Come join us on the BleepingComputer Live Chat too! |


#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,237 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:42 AM

Posted 23 May 2010 - 04:17 PM

<<These are the only .dmp files left, but I had a whole cluster of them the other day. I guess my junk file cleaning program erased them.>>

If you have installed a program...that has instructions to remove message files which are crucial to proper interpretation of STOP errors...I would suggest that you uninstall such program.

Louis

#7 goodkat

goodkat
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:42 AM

Posted 23 May 2010 - 06:26 PM

I did when I saw it had removed the .dmps. That's more than I want cleaned out. Guess I'll have to wait for some more crashes to get further info about the errors.

#8 caperdog

caperdog

  • BC Advisor
  • 954 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Nova Scotia
  • Local time:06:42 AM

Posted 23 May 2010 - 06:57 PM

so if you unplug the new drive, does everything work fine again ?

are there firmware updates for your new drive ? this is a last resort but it would be interesting to know if there is one.
http://seagate.custkb.com/seagate/crm/self...&NewLang=en




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users