Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need help with blue screen


  • Please log in to reply
23 replies to this topic

#1 Miscym

Miscym

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 04:08 AM

Hey, this is my first time I'm on these forums so I'm sorry if I put this in the wrong place. I've been getting alot of BSOD's lately and I don't know what is causing it so I followed a few guides on this website and hopefully got some new info on the matter. I first turned off the automatic restart and wrote down the stop error messge I got when I get BSOD. The message is:

*** STOP: 0x0000007 (0x00000000, 0x89007A00, 0x00000000, B2B7DCA0)


I also used the Windows debugger tool to analyze the latest minidump report:

BugCheck 77, {0, 89007a00, 0, b2b7dca0}

Probably caused by : memory_corruption ( nt!MmInPageKernelStack+176 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_STACK_INPAGE_ERROR (77)
The requested page of kernel data could not be read in. Caused by
bad block in paging file or disk controller error.
In the case when the first arguments is 0 or 1, the stack signature
in the kernel stack was not found. Again, bad hardware.
An I/O status of c000009c (STATUS_DEVICE_DATA_ERROR) or
C000016AL (STATUS_DISK_OPERATION_FAILED) normally indicates
the data could not be read from the disk due to a bad
block. Upon reboot autocheck will run and attempt to map out the bad
sector. If the status is C0000185 (STATUS_IO_DEVICE_ERROR) and the paging
file is on a SCSI disk device, then the cabling and termination should be
checked. See the knowledge base article on SCSI termination.
Arguments:
Arg1: 00000000, (page was retrieved from page cache)
Arg2: 89007a00, value found in stack where signature should be
Arg3: 00000000, 0
Arg4: b2b7dca0, address of signature on kernel stack

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0 - STATUS_WAIT_0

BUGCHECK_STR: 0x77_0

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from 80512e48 to 804f9f43

STACK_TEXT:
b8523d58 80512e48 00000077 00000000 89007a00 nt!KeBugCheckEx+0x1b
b8523d8c 8053fda6 00557a00 00000000 8a4a8b30 nt!MmInPageKernelStack+0x176
b8523da4 80540276 89557a60 805cff62 00000000 nt!KiInSwapKernelStacks+0x16
b8523dac 805cff62 00000000 00000000 00000000 nt!KeSwapProcessOrStack+0x7c
b8523ddc 8054612e 805401fa 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MmInPageKernelStack+176
80512e48 8a550b mov dl,byte ptr [ebp+0Bh]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MmInPageKernelStack+176

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4bd6e0e8

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0x77_0_nt!MmInPageKernelStack+176

BUCKET_ID: 0x77_0_nt!MmInPageKernelStack+176

Followup: MachineOwner
---------


Hopefully this is all information neeeded to solve my problem, I'm grateful for all help I can get. Thanks in advance.

Edited by Miscym, 13 January 2011 - 04:10 AM.


BC AdBot (Login to Remove)

 


#2 Allan

Allan

  • BC Advisor
  • 8,629 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:02:49 PM

Posted 13 January 2011 - 08:04 AM

http://support.microsoft.com/kb/228753

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:49 PM

Posted 13 January 2011 - 10:01 AM

Let's try this :), it's simpler than trying to decipher one isolated message or a number of .dmp files.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html .

Double-click BlueScreenView.exe file.

When scanning is done, Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content and paste it into your next reply.

Louis

Edited by hamluis, 13 January 2011 - 11:22 AM.


#4 Miscym

Miscym
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 10:29 AM

Let's try this :), it's simpler than trying to decipher one isolated message or a number of .dmp files.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click BlueScreenView.exe file.

When scanning is done, Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content and paste it into your next reply.

Louis


The link is not working. =/

#5 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:11:49 AM

Posted 13 January 2011 - 10:37 AM

Try this one... BlueScreenView

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#6 Miscym

Miscym
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 10:54 AM

My bad, had to use a different browser.

Here's all i got:

==================================================
Dump File : Mini011311-02.dmp
Crash Time : 2011-01-13 09:57:34
Bug Check String : KERNEL_STACK_INPAGE_ERROR
Bug Check Code : 0x00000077
Parameter 1 : 0x00000000
Parameter 2 : 0x89007a00
Parameter 3 : 0x00000000
Parameter 4 : 0xb2b7dca0
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+22f43
File Description : NT:s kernel och system
Product Name : Operativsystemet Microsoft® Windows®
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011311-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011311-01.dmp
Crash Time : 2011-01-13 09:03:44
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x805bc1e6
Parameter 3 : 0xb4a40c7c
Parameter 4 : 0x00000000
Caused By Driver : vsdatant.sys
Caused By Address : vsdatant.sys+6b0ca
File Description : TrueVector Device Driver
Product Name : TrueVector Device Driver
Company : Check Point Software Technologies LTD
File Version : 9.0.112.000
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011311-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011111-03.dmp
Crash Time : 2011-01-11 21:18:27
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xc1a4ad40
Parameter 2 : 0x00000000
Parameter 3 : 0x805232d6
Parameter 4 : 0x00000000
Caused By Driver : hal.dll
Caused By Address : hal.dll+2427
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2111)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011111-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011111-02.dmp
Crash Time : 2011-01-11 18:28:19
Bug Check String : CRITICAL_OBJECT_TERMINATION
Bug Check Code : 0x000000f4
Parameter 1 : 0x00000003
Parameter 2 : 0x8a188728
Parameter 3 : 0x8a18889c
Parameter 4 : 0x805d2954
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+22f43
File Description : NT:s kernel och system
Product Name : Operativsystemet Microsoft® Windows®
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011111-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011111-01.dmp
Crash Time : 2011-01-11 09:48:17
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xe3afa654
Parameter 2 : 0x00000000
Parameter 3 : 0x805b22d9
Parameter 4 : 0x00000001
Caused By Driver : vsdatant.sys
Caused By Address : vsdatant.sys+55c70
File Description : TrueVector Device Driver
Product Name : TrueVector Device Driver
Company : Check Point Software Technologies LTD
File Version : 9.0.112.000
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011111-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011011-03.dmp
Crash Time : 2011-01-10 18:31:43
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x1000007f
Parameter 1 : 0x00000008
Parameter 2 : 0xb8338d70
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+217da
File Description : NT File System Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2111)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011011-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011011-02.dmp
Crash Time : 2011-01-10 16:22:22
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xc488757c
Parameter 2 : 0x00000000
Parameter 3 : 0x80505f37
Parameter 4 : 0x00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+2ef37
File Description : NT:s kernel och system
Product Name : Operativsystemet Microsoft® Windows®
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011011-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini011011-01.dmp
Crash Time : 2011-01-10 15:45:23
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x100000d1
Parameter 1 : 0x80873850
Parameter 2 : 0x0000001c
Parameter 3 : 0x00000008
Parameter 4 : 0x80873850
Caused By Driver : PavProc.sys
Caused By Address : PavProc.sys+1cd3
File Description : Panda Protection driver
Product Name : Panda shield
Company : Panda Security, S.L.
File Version : 1.1.18.0
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini011011-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini010911-01.dmp
Crash Time : 2011-01-09 18:33:03
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x1000007f
Parameter 1 : 0x0000000d
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : av5flt.sys
Caused By Address : av5flt.sys+4361
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini010911-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini010611-03.dmp
Crash Time : 2011-01-06 18:04:55
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xff77c900
Parameter 2 : 0x00000000
Parameter 3 : 0x805bac7e
Parameter 4 : 0x00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+e3c7e
File Description : NT:s kernel och system
Product Name : Operativsystemet Microsoft® Windows®
Company : Microsoft Corporation
File Version : 5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini010611-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini010611-02.dmp
Crash Time : 2011-01-06 15:18:50
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x100000d1
Parameter 1 : 0x80bd2d50
Parameter 2 : 0x0000001c
Parameter 3 : 0x00000008
Parameter 4 : 0x80bd2d50
Caused By Driver : PavProc.sys
Caused By Address : PavProc.sys+1cd3
File Description : Panda Protection driver
Product Name : Panda shield
Company : Panda Security, S.L.
File Version : 1.1.18.0
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini010611-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini010611-01.dmp
Crash Time : 2011-01-06 09:24:11
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x1000007f
Parameter 1 : 0x0000000d
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : av5flt.sys
Caused By Address : av5flt.sys+4361
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini010611-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================

==================================================
Dump File : Mini010511-01.dmp
Crash Time : 2011-01-05 14:09:48
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x1000007f
Parameter 1 : 0x0000000d
Parameter 2 : 0x00000000
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : av5flt.sys
Caused By Address : av5flt.sys+4361
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini010511-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90 112
==================================================



#7 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:11:49 AM

Posted 13 January 2011 - 11:06 AM

Interesting, I'm using Firefox, and Hamluis's link doesn't work for me either.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#8 Miscym

Miscym
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 11:18 AM

Interesting, I'm using Firefox, and Hamluis's link doesn't work for me either.

Yeah he put a dot at the end of the link, I used yours and it worked but only on explorer not on Firefox the one I usually use. I'm using Zonealarm Firewall and it blocked the site but I had the option to visit it anyways on Explorer.

#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:49 PM

Posted 13 January 2011 - 11:23 AM

Apologies for the link...putting a period at the end (without one blank space) made it dysfunctional...I forget this often when I post, corrected :).

Louis

#10 Allan

Allan

  • BC Advisor
  • 8,629 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:02:49 PM

Posted 13 January 2011 - 11:44 AM

What is new or different since the last time everything worked properly (ie, new hw, new sw, virus, error, etc)?

Multiple and varied bsod's are never a good thing and often point to a significant hardware problem (ie, mobo, ram, etc).

Edited by AllanG, 13 January 2011 - 11:45 AM.


#11 Miscym

Miscym
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 12:03 PM

What is new or different since the last time everything worked properly (ie, new hw, new sw, virus, error, etc)?

Multiple and varied bsod's are never a good thing and often point to a significant hardware problem (ie, mobo, ram, etc).


I've been getting them for months now. I tried different methods to solve it:

I had a problem with the computer overheating when playing games or opening alot of programs. And that would cause BSOD's. So I put in a new fan and that solved the overheating problem.

Then I found out that I had a virus that refused to be removed, I tried several methods but it stayed. So I formatted the harddrive and installed XP on a new partition and hoped the BSOD problem would be solved too.

Now I barely have any programs installed and I get BSOD's when surfing or just listening to music so I'm barely using any of the CPU. I thought that was the main problem but it wasn't. And I'm pretty sure I've installed all drivers correctly and got no viruses so I got no clue whatsoever what's causing it, that's when I tried searching for the problem and found this forum.

Edit: When it comes to hardware changes the only thing I can think of is that I first built the computer with a 2GB ram memory. Then I got a 1GB ram memory for free and decided to put it in at a later date, can it be that one that is causing it?

Edited by Miscym, 13 January 2011 - 12:05 PM.


#12 Allan

Allan

  • BC Advisor
  • 8,629 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:02:49 PM

Posted 13 January 2011 - 12:11 PM

1) If the problem started immediately after you added the ram then yes, that would certainly seem to be related - wouldn't you think? You can always remove the new stick and see what happens.

2) Why would you install the OS on a "different" partition after a format? Is the OS not on c: drive?

3) Assuming you are not still infected, it could be anything from the ram stick you mentioned to a bad mobo.

#13 Miscym

Miscym
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 12:19 PM

1) If the problem started immediately after you added the ram then yes, that would certainly seem to be related - wouldn't you think? You can always remove the new stick and see what happens.

2) Why would you install the OS on a "different" partition after a format? Is the OS not on c: drive?

3) Assuming you are not still infected, it could be anything from the ram stick you mentioned to a bad mobo.


I'm not really sure when it started that's the problem. But I will try to remove the stick and see if there's a difference. The OS is still on c: drive.

#14 Allan

Allan

  • BC Advisor
  • 8,629 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:02:49 PM

Posted 13 January 2011 - 12:33 PM

Okay. Then you didn't put it on a "new partition". Did you actually format first? I ask because if you didn't you may still be infected by the original virus.

#15 Miscym

Miscym
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 13 January 2011 - 12:38 PM

Okay. Then you didn't put it on a "new partition". Did you actually format first? I ask because if you didn't you may still be infected by the original virus.


Sorry, what I meant is that I deleted the old partition and installed it on an unpartitioned space or what you call it. I got XP in swedish so it's not always easy for me to find the right expressions in english.

Edited by Miscym, 13 January 2011 - 12:39 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users