Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD and atapi.sys


  • Please log in to reply
5 replies to this topic

#1 BlueBomber600

BlueBomber600

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:06:17 AM

Posted 17 April 2012 - 12:28 AM

Hi,

I've started having repeating BSODs this evening. It occurs just a minute or so after starting the computer up, even if I am not running or doing anything yet. However, starting in safe mode, it seems to be fine. I have not made any changes to the computer - hardware, drivers, etc. Yesterday it did go to a BSOD once, but I restarted and ran fine for several hours before shutting it down.

The error message from today includes:

STOP: 0x0000008E (0xC0000005, 0xF73EA71D, 0xA9112748, 0x00000000)
atapi.sys - address F73EA71D base F73E0000, Datestamp 4802539d

I'd really appreciate any help on how to handle this.

Thanks,
Emil

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,391 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:17 AM

Posted 17 April 2012 - 08:51 AM

Let's try this from safe mode.

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html .

Double-click BlueScreenView.exe file.

When autoscan is done (screen comes up), click Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt, copy all content and paste it into your next reply.

Louis

#3 BlueBomber600

BlueBomber600
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:06:17 AM

Posted 17 April 2012 - 10:00 AM

Hi Louis,

Thanks for the help.

Here are the results:


==================================================
Dump File : Mini041612-05.dmp
Crash Time : 4/16/2012 10:51:28 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf73ea71d
Parameter 3 : 0xa10db748
Parameter 4 : 0x00000000
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd
Stack Address 3 : MpFilter.sys+e560
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini041612-05.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini041612-04.dmp
Crash Time : 4/16/2012 9:19:49 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf73ea71d
Parameter 3 : 0xa9112748
Parameter 4 : 0x00000000
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd
Stack Address 3 : MpFilter.sys+e560
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini041612-04.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini041612-03.dmp
Crash Time : 4/16/2012 8:55:36 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf73ea71d
Parameter 3 : 0xa969c748
Parameter 4 : 0x00000000
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd
Stack Address 3 : MpFilter.sys+e560
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini041612-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini041612-02.dmp
Crash Time : 4/16/2012 8:41:52 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf73ea71d
Parameter 3 : 0xa12fd748
Parameter 4 : 0x00000000
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd
Stack Address 3 : MpFilter.sys+e560
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini041612-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini041612-01.dmp
Crash Time : 4/16/2012 8:36:58 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf73ea71d
Parameter 3 : 0xa236b748
Parameter 4 : 0x00000000
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd
Stack Address 3 : MpFilter.sys+e560
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini041612-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

==================================================
Dump File : Mini041512-01.dmp
Crash Time : 4/15/2012 8:35:07 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf73ea71d
Parameter 3 : 0xa8dc2748
Parameter 4 : 0x00000000
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd
Stack Address 3 : MpFilter.sys+e560
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini041512-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 90,112
==================================================

#4 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:12:17 AM

Posted 17 April 2012 - 10:08 AM

Caused By Driver : atapi.sys
Caused By Address : atapi.sys+a71d
File Description : IDE/ATAPI Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Crash Address : atapi.sys+a71d
Stack Address 1 : ntoskrnl.exe+1819f
Stack Address 2 : MpFilter.sys+ddfd <<< MSE
Stack Address 3 : MpFilter.sys+e560 <<< MSE

MpFilter.sys is likely to be part of either MSE (Microsoft Security Essentials) antivirus or Windows Defender.
Un-install which ever application that you have on the system and then re-start the computer.
  • Does that fix the BSOD issue?

Edited by AustrAlien, 17 April 2012 - 10:10 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 BlueBomber600

BlueBomber600
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:06:17 AM

Posted 18 April 2012 - 10:13 AM

Wow, that seems to have fixed it. I removed Microsoft Security Essentials, ran the computer for several hours, including working on it, and no blue screens at the moment.

Very surprised that MSE did this.. I've used it before on the same computer without any issues.

This is probably a seperate issue now, but when I turn on the wireless card, the computer seems to instantly bog down, and the harddrive light seems to almost constantly be on. It seems to happen regardless of actually being connected to the internet. With it turned off, and after a restart, the computer runs great.
Would this be more appropriate in another section (Security / Am I infected)?

Thanks for all the help so far.

Emil

#6 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:12:17 AM

Posted 18 April 2012 - 03:41 PM

This is probably a separate issue now ...

Wireless and networking is not an area that I have any familiarity with .... so I think it probably best if you start a new topic in order to attract the attention of helpers best able to assist you resolve the issue. I suggest starting a new topic in the Am I Infected? forum if you have any concerns at all that the issue may be malware-related. Provide a link to this topic and mention the MSE/atapi.sys BSOD issue, which may turn out to be related if indeed malware is involved.

Good luck.

Edited by AustrAlien, 18 April 2012 - 03:57 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users