Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot find any .dmp files yet have many BSODs


  • Please log in to reply
14 replies to this topic

#1 mannshands

mannshands

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 04 September 2010 - 09:29 PM

Here is the situation:
It has been quite warm here so laptops run hot and occasionally misbehave despite extra fans, etc. My ADVENT laptop started acting sluggish and locking up while running multiple apps, that it normally can handle. It started in the hot part of the day, but now can be anytime. Example, dl'ing torrents, streaming web-radio and surfing simultaneously. Task mgr cpu was very high use, but no process/app was using that much cpu.
The pattern is
lose internet connect>cpu use shoots up>unit gets hotter>screen freeze on browser>reset router>bsod

I thought it was a virus because one day I started the laptop and mysteriously my FFox wouldnt connect...setting was changed to use proxies
. And my IDE primary controller had been changed to PIO only, not DMA. Scans found nothing.

Then I started getting BSODs with this info:
0x40000080 (0x89D756C0, 0x89C1BA80, 0x80551388, 0x00000001)
I saw nothing directly related to these crashes in Event Viewer. I found that odd! I noticed alot of network access denied errors, nothing in the MS error reference link explained those. Also found event warnings regarding wscsvc service, TfFs Mon and TfSys Mon. I seem to have more services than before.
I used ProcExp and found the prob was Hardware Interrupts using 40-80% of my cpu. Research suggested a router problem and resetting the router does fix the Hardware interrupts problem, but then it BSOD, or it may run for a few hrs, then Hardware Interrupts goes wild again.
I ran TrendMicro Housecall/SAS/MBAM/CF/Saphos rootkit 2weeks ago when this first happened. A few minor threats may come up, but nothing major. Fans and cooling duct clean. Did have some video driver issues 2 months ago, but Driver Genius Pro sorted that out(i think). Advent provides no XP video driver for this model, and the ones I got from devid.info lasted almost a year before they developed problems. Maybe it is related, I don't know...

So now I am following your BSOD protocol. There seem to be no .dmp/.DMP files besides FFox crashes, nothing from this week at all. I've been BSODing at least twice a day. I dl'ed the dump analyser. But have no dumps to put in it. Yes, I changed folder view to see all files hidden and system. Nada.
Please advise me on next step.
Much appreciated,
mannshands
Advent 5530 laptop, 2Gb ram, Intel Core2Duo 1.8GHz, orig. Vista wiped, downgraded to XP Pro sp3, MBAM Pro

Edited by mannshands, 04 September 2010 - 09:30 PM.


BC AdBot (Login to Remove)

 


#2 Romeo29

Romeo29

    Learning To Bleep


  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:01:00 PM

Posted 04 September 2010 - 11:45 PM

You can find your mini dump files in c:/windows/minidumps.
How to configure to save mimidump : http://support.microsoft.com/kb/315263

#3 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 05 September 2010 - 03:52 AM

Hi,
The minidump folder is empty. Checked the link you gave and found out
the startup and recovery options to use the small memory dump file had been disabled.
I turned it on and set it to small memory dump. Guess there is nothing to do till it bsods again. Will post .dmp fle asap.
Thanks
mannshands

Edited by mannshands, 05 September 2010 - 04:09 AM.


#4 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 05 September 2010 - 06:22 AM

Hi again,
Here is the minidump. Hope you can decipher it for me.


Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [D:\WINDOWS\Minidump\Mini090510-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols


Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_qfe.090206-1316
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Sun Sep 5 12:54:27.437 2010 (UTC + 2:00)
System Uptime: 0 days 9:09:52.111
Loading Kernel Symbols
...............................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
........................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 40000080, {89d886c0, 89cf6e68, bacd7f2c, 1}

Unable to load image SiSGbeXP.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SiSGbeXP.sys
*** ERROR: Module load completed but symbols could not be loaded for SiSGbeXP.sys
Probably caused by : SiSGbeXP.sys ( SiSGbeXP+679e )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BUGCODE_ID_DRIVER (40000080)
This is the NDIS Driver Bugcheck for Windows 2000 and Windows XP.
For Windows Server 2003 and later, see 0x7C, BUGCODE_NDIS_DRIVER.
DESCRIPTION
The meaning of the bug check parameters cannot be determined by examining the
parameters alone. You must also examine the text of a DbgPrint message.
For details, see either the debugger documentation or the DDK documentation.
Arguments:
Arg1: 89d886c0
Arg2: 89cf6e68
Arg3: bacd7f2c
Arg4: 00000001

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x40000080

PROCESS_NAME: mbamservice.exe

LAST_CONTROL_TRANSFER: from ba459921 to 804f9f43

STACK_TEXT:
bacd7eac ba459921 40000080 89d886c0 89cf6e68 nt!KeBugCheckEx+0x1b
bacd7f0c baa9e79e 89d886c0 bacd7f2c 00000001 NDIS!ethFilterDprIndicateReceivePacket+0x5fe
WARNING: Stack unwind information not available. Following frames may be wrong.
bacd7f9c baa99231 00000001 89d886c0 89d4b7d8 SiSGbeXP+0x679e
bacd7fb4 ba44ee99 89d4b588 89c90a18 ffdff9c0 SiSGbeXP+0x1231
bacd7fcc 80545e7f 89d4b7ec 89d4b7d8 00000000 NDIS!ndisMDpcX+0x21
bacd7ff4 805459eb 9e6cbd44 00000000 00000000 nt!KiRetireDpcList+0x61
bacd7ff8 9e6cbd44 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2b
805459eb 00000000 00000009 0081850f bb830000 0x9e6cbd44


STACK_COMMAND: kb

FOLLOWUP_IP:
SiSGbeXP+679e
baa9e79e ?? ???

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: SiSGbeXP+679e

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: SiSGbeXP

IMAGE_NAME: SiSGbeXP.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 47cba188

FAILURE_BUCKET_ID: 0x40000080_SiSGbeXP+679e

BUCKET_ID: 0x40000080_SiSGbeXP+679e

Followup: MachineOwner
---------

Thanks again
mannshands

#5 Romeo29

Romeo29

    Learning To Bleep


  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:01:00 PM

Posted 05 September 2010 - 07:23 AM

SiSGbeXP.sys is causing problem. This seems to be your Ethernet card driver. To me it looks like SiS Gigabit LAN driver but check your device manager or use SIW. You can download latest drivers from http://www.sis.com/download/

You can check if the Ethernet card is problem by disabling it for a while and checking if you still get BSOD.
If the card is built on motherboard, then disable it in BIOS. If the card is PCIE then remove it from slot. You can also try re-inserting it in another PCIE slot etc. You can also disable the Ethernet card in Device Manager.

In the meanwhile, you can use USB cable to access the internet.

#6 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 05 September 2010 - 09:19 AM

In the meanwhile, you can use USB cable to access the internet

How do you do that? I never heard of a usb internet connect besides a dongle.
Found the SiS 191 driver. But first I'm gonna test system with ethernet card disabled, will repost with results.
Thanks again.

#7 Romeo29

Romeo29

    Learning To Bleep


  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:01:00 PM

Posted 05 September 2010 - 12:07 PM

Most of the routers (all I have seen so far) have both Ethernet and USB interface. What is your router model?

#8 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 05 September 2010 - 11:24 PM

My router is a Motorola Canopy roof top antenna combo. It feeds an ethernet cable to my office OvisLink 1 in/ 5 out switch, which has no usb. I am in rural Spain. There are no usb internet connections in any of the routers/switches/modems or wifi access points for home networking. All ethernet or wireless.

So what I guess i need to do is back up the current driver, then install a new SiS driver,and see if bsods go away?

#9 hamluis

hamluis

    Moderator


  • Moderator
  • 55,262 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:00 PM

Posted 06 September 2010 - 06:53 AM

I would uninstall the current driver (based on the premise that it's damaged), using Device Manager...then reinstall the driver. I'm not convinced that the mechanism for updating works properly when a driver is damaged, I prefer to remove it as a possible obstacle to success and then reinstall the driver.

Louis

#10 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 06 September 2010 - 09:07 AM

Update. Uninstalled MBAM. Got another bsod.
Uninstalled Sis driver. I reboot to make the change, but, it keeps loading the old driver on startup as new hardware, before I can get a chance to install a newly downloaded copy. It has no setup so have to do it as an update. It's the same version as the one I was using. But maybe mine is corrupt. So I rolled back to an older version, then updated using the new one . It installed ok.
Just bsod'd again. Need to get a nap before I check the minidump debugger.
I have yet another copy of SiS driver with the setup included. How do I uninstall forcing the reinstall to use the newer drivers?
Adios

Edited by mannshands, 06 September 2010 - 09:08 AM.


#11 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 06 September 2010 - 12:27 PM

Here is the latest mini dump log. MBAM is gone. Still have SiiS driver issue. Seems like IE is more stable than FFox :thumbsup: , I go longer between bsod's. Is it worth trying an older version of the driver. Any other ideas?

Attached Files



#12 MrBruce1959

MrBruce1959

    My cat Oreo


  • BC Advisor
  • 6,377 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Norwich, Connecticut. in the USA
  • Local time:02:00 PM

Posted 06 September 2010 - 01:03 PM

I read your text file it refers to NDIS which is related to the 802.11 network driver.

Here is a list of downloads from Mirosofts technet.

http://social.technet.microsoft.com/Search...wnload&ac=1

Bruce.
Welcome to Bleeping Computer! :welcome:
New Members: Please click here for the Bleeping Computer Forum Board Rules
 
My Career Involves 37 Years as an Electronics Repair Technician, to Which I am Currently Retired From.

I Am Currently Using Windows 10 Home Edition.

As a Volunteer Staff Member of Bleeping Computer, the Help That I Proudly Provide Here To Our BC Forum Board Membership is Free of Charge. :wink:

#13 Romeo29

Romeo29

    Learning To Bleep


  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:01:00 PM

Posted 06 September 2010 - 07:45 PM

The dump still indicates the problem with SiS Gigabit Ethernet. If the driver update cannot solve the problem then the hardware is faulty.

#14 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 07 September 2010 - 02:52 AM

I read your text file it refers to NDIS which is related to the 802.11 network driver.

Here is a list of downloads from Mirosofts technet.

http://social.technet.microsoft.com/Search...wnload&ac=1

Bruce.


That link is to a bunch of powerpoint presentations of proposals for corporate marketing, no debug info I could find.

I booted into safe mode with networking. Been multi tasking hard for 3 hrs and no bsod.

#15 mannshands

mannshands
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:08:00 PM

Posted 13 September 2010 - 01:05 PM

I'm back. It has bsod'ed in Safe Mode now. It bsod's every 2hrs or so in normal mode, even when not connected to isp! If it does connect to isp at all it is only for 20 mins before the hardware interrupts freeze it up. Plus I get random black screen shutdowns, as if it ran out of power, but only if the unit is on but inactive for half an hour. I am gonna uninstall the network card and see if I can get it to bsod again. Unless you have a better suggestion? Having trouble location an external ethernet to usb adapter here in the boondocks(Andalucia), we get no UPS in the mountains. The only shop here wants 50euros(65$) to order one for me. It lists on the Dlink site for $29!
thx




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users