Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue Screen Stop: 0x0000007e


  • Please log in to reply
33 replies to this topic

#1 revillini

revillini

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 24 November 2012 - 11:33 PM

My Dell Dimension E521 only runs in safe mode. It still allows networking, but will not successfully restart normally or with the last known configuration. The message displayed on the blue screen is

Stop: 0x0000007e (0xC000001D, 0xF39420B6, 0xF78A2578, 0xF78A2274)

I welcome any assistance you can give.

BC AdBot (Login to Remove)

 


#2 scurvychef

scurvychef

  • Members
  • 182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Western NY
  • Local time:05:48 AM

Posted 25 November 2012 - 01:15 AM

We would need more details about the system.. but you might want to take a look at This first.

what I gather from looking at a couple sites is that you either have a bad hard drive or you have a corrupted filesystem, as you will see here

#3 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:48 PM

Posted 25 November 2012 - 01:26 AM

Let's collect some more information: I'll have a look at it and help you try to resolve the problem.

:step1: Download the following 2 files and save both to the My Documents folder:

:step2: Go to the My Documents folder and run #1 (BSOD_XP_v1.3_jcgriff2_PROD_.exe). (That will also run #2.)

It will take a little time to complete: Please be patient and wait for it to finish.
A new folder named TSF_XP_Support will be created in My Documents.

:step3: Zip up the newly created TSF_XP_Support folder.
  • Right-click on the TSF_XP_Support folder > Send to ... > Compressed (zipped) Folder.
    The newly created zip file will be located in the My Documents folder.

:step4: Please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file.

Note: The BC forums will allow a total attachment size of only 512 kb (and what you need to attach will exceed this limit).
See the suggestions in the following links for recommendations on file sharing websites:
  • http://lifehacker.com/388284/best-online-file-sharing-services
  • http://www.hongkiat.com/blog/15-great-free-online-file-sharing-alternatives/
  • http://www.smashingapps.com/2008/08/28/5-best-free-file-hosting-services-to-store-your-files.html

    I can recommend Posted Image: Also suitable is Posted Image

:step5: Please download MiniToolBox, save it to your Desktop and run it.
  • Checkmark the following checkboxes:
    • List Installed Programs
  • Click Go.
    When the scan is finished, a text file will open in a Notepad window.
  • Copy the entire contents of the Notepad window, and paste in your reply.
    (Result.txt will be saved in the same directory the tool is run.)

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#4 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 25 November 2012 - 01:22 PM

I have downloaded the programs you requested and attached the files as requested. Thank you for your help



TSF_XP_Support

https://www.box.com/s/toyehrej85l2hly51c5i

Mini Toolbox Log is below

MiniToolBox by Farbar Version: 25-11-2012
Ran by Dani (administrator) on 25-11-2012 at 11:12:47
Running from "C:\Documents and Settings\Dani\My Documents\Downloads"
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Network
***************************************************************************

=========================== Installed Programs ============================

7-Zip 9.20
Adobe AIR (Version: 2.7.0.19530)
Adobe Flash Player 10 ActiveX (Version: 10.0.42.34)
Adobe Flash Player 11 Plugin (Version: 11.2.202.235)
Adobe Reader X (10.1.3) (Version: 10.1.3)
Adobe Shockwave Player 11.6 (Version: 11.6.3.633)
AOLIcon (Version: 1.00.0000)
Apple Application Support (Version: 2.1.7)
Apple Mobile Device Support (Version: 5.1.1.4)
Apple Software Update (Version: 2.1.3.127)
Argente - Registry Cleaner 3.0.0.2 (Version: 3.0.0.2)
Bonjour (Version: 3.0.0.10)
Broadcom Management Programs (Version: 9.03.01)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
Coupon Companion (Version: 1.24.151.151)
Critical Update for Windows Media Player 11 (KB959772)
Dell System Restore (Version: 2.00.0000)
Digital Content Portal (Version: 1.00.0000)
Dropbox (Version: 1.2.52)
ESET Online Scanner v3
Funmoods
Google Chrome (Version: 19.0.1084.52)
Google Desktop (Version: 5.9.1005.12335)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.3.2710.138)
Google Update Helper (Version: 1.3.21.111)
High Definition Audio Driver Package - KB835221 (Version: 20040219.000000)
HiJackThis (Version: 1.0.0)
HP LaserJet P1000 series
HP Software Update (Version: 2.0.37.20031205)
HPCarePackCore (Version: 10.0.0.1)
HPCarePackProducts (Version: 1.0.0.1)
hppMSRedist (Version: 1.00.0000)
hppusgP1000 (Version: 000.000.00003)
HPSSupply (Version: 2.1.1.0000)
Incredibar Toolbar on IE and Chrome
iTunes (Version: 10.6.1.7)
Java Auto Updater (Version: 2.0.6.1)
Java™ 6 Update 30 (Version: 6.0.300)
KODAK Share Button App (Version: 3.01.0000.0000)
Learn2 Player (Uninstall Only)
Malwarebytes' Anti-Malware version 1.51.2.1300 (Version: 1.51.2.1300)
MarketResearch (Version: 90.0.142.000)
McAfee VirusScan Enterprise (Version: 8.0.0)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB2656370)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Standard Edition 2003 (Version: 11.0.8173.0)
Microsoft Plus! Digital Media Edition Installer (Version: 1.1.0.3514)
Microsoft Plus! Photo Story 2 LE (Version: 1.1.0.3463)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 08.05.0818)
MobileMe Control Panel (Version: 3.0.0.101)
Move Media Player
Mozilla Firefox (4.0b4) (Version: 4.0b4 (en-US))
Mozilla Firefox 12.0 (x86 en-US) (Version: 12.0)
Mozilla Maintenance Service (Version: 12.0)
MrvlUsgTracking (Version: 1.0.7)
MSXML 4.0 SP2 (KB925672) (Version: 4.20.9839.0)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
My DSC
Norton AntiVirus (Version: 18.7.1.3)
NVIDIA Drivers
overland (Version: 2.1.5)
Photosmart 140,240,7200,7600,7700,7900 Series (Version: 2.0)
PS7200 (Version: 1.01.0000)
PSShortcutsP (Version: 1.01.0000)
PSUsage (Version: 1.30.0000)
QFolder (Version: 1.00.0000)
QuickTime (Version: 7.72.80.56)
Real Estate Transaction Viewer
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealUpgrade 1.1 (Version: 1.1.0)
RegCure (Version: 3.0.2.0)
Roxio DLA (Version: 5.2.0)
Roxio RecordNow Audio (Version: 2.0.4)
Roxio RecordNow Copy (Version: 2.0.4)
Roxio RecordNow Data (Version: 2.0.4)
Safari (Version: 4.30.19.1)
Scholastic's I SPY Fun House
Seagate Dashboard (Version: 1.0.0.810)
SearchAssist
Sonic Activation Module (Version: 1.0)
Sonic Update Manager (Version: 3.0.0)
swMSM (Version: 12.0.0.1)
Uninstall Dual Mode Camera
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Windows Internet Explorer 8 (KB972636) (Version: 1)
Update for Windows Internet Explorer 8 (KB976662) (Version: 1)
Update for Windows Internet Explorer 8 (KB976749) (Version: 1)
Update for Windows Internet Explorer 8 (KB980182) (Version: 1)
Update for Windows XP (KB2141007) (Version: 1)
Update for Windows XP (KB2345886) (Version: 1)
Update for Windows XP (KB2467659) (Version: 1)
Update for Windows XP (KB2541763) (Version: 1)
Update for Windows XP (KB2607712) (Version: 1)
Update for Windows XP (KB2616676) (Version: 1)
Update for Windows XP (KB2641690) (Version: 1)
Update for Windows XP (KB951072-v2) (Version: 2)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB955839) (Version: 1)
Update for Windows XP (KB967715) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB971737) (Version: 1)
Update for Windows XP (KB973687) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
URL Assistant
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (Version: 9.0.30729.01)
WebFldrs XP (Version: 9.50.7523)
Windows Defender (Version: 1.1.1593.0)
Windows Internet Explorer 7 (Version: 20061107.210142)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Format 11 runtime
Windows Media Player 10 (Version: 9.00.3636)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows XP Service Pack 3 (Version: 20080414.031525)
Yahoo! Music Jukebox (Version: 2.0.0.134)
zipForm6 (Version: 1.0.0.0)

**** End of log ****

#5 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:48 PM

Posted 27 November 2012 - 09:53 PM

I am sorry about the delay in getting back to you.

In an earlier post (post #3, the first step), the instructions called for downloading autoruns.exe to the "My Documents" folder. When you ran the jcgriff2 application it was also supposed to run autoruns and provide the output .... but that didn't happen. I would like you now to run autoruns.exe and provide me with the output:
  • Double-click on autoruns.exe to run the application.
    Please be patient: It may take a little time to complete scanning of the system.
  • When scanning is complete, on the main menu at the top, go to File > Save.
  • Choose to Save the file to your Desktop, with the default name of AutoRuns.
    The default file type will be Autoruns Data (.arn)
  • Close autoruns.
At the Desktop, zip up the Autoruns.arn file and attach to your reply:
  • Right-click on the AutoRuns.arn file > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Desktop).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
:exclame: Note: The BC forums will allow a total attachment size of only 512 kb and what you need to attach may exceed this limit. In that case, please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file.

==================
Please do the following to create a boot log of a normal startup attempt.

:step1: Re-name your existing ntbtlog.txt file (so that you don't include all the old logs in what you will upload):
  • Navigate to C:\WINDOWS\ntbtlog.txt
  • Re-name the file ntbtlog.txt to ntbtlogOLD.txt
    (A new ntbtlog.txt file will be created on the next startup.)
:step2: Create a new boot log of a normal startup.
  • Re-start the computer, tapping F8 to get to the Windows Advanced Options Menu.
  • Choose Enable Boot Logging and press <ENTER>
    Allow your computer to attempt to start normally, and it is expected that your system will crash.
  • After the crash and re-start, load Windows in Safe Mode with networking.
  • Navigate to C:\WINDOWS\ntbtlog.txt
  • Right-click on the ntbtlog.txt file > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Windows folder).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
=============
Only one minidump was included in your upload. If you have some more (recent ones) available now, I would like to see them. Please zip up the minidumps and attach the resultant zip file to your next reply:
  • Navigate to C:\Windows\Minidump <<< folder
  • Click on the first minidump file to select it.
  • Hold down the <Shift> key, and click on the last minidump file to select all of the files.
  • Release the <Shift> key.
  • Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Minidump folder).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
=======================
BSOD BUGCHECK SUMMARY: 1 minidump available
................................................................
Loading Dump File [C:\CactusIsland\revillini_BC\TSF_XP_Support\Mini040307-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.061219-0311
Debug session time: Wed Apr 4 12:09:35.234 2007 (UTC + 11:00)
System Uptime: 3 days 10:17:16.906
Unable to load image nv4_disp.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nv4_disp.dll
*** ERROR: Module load completed but symbols could not be loaded for nv4_disp.dll
Probably caused by : nv4_disp.dll ( nv4_disp+29337 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: explorer.exe
FAILURE_BUCKET_ID: 0x8E_nv4_disp+29337
Bugcheck code 1000008E
Arguments c0000005 bf03b337 b18ab8b0 00000000
BiosVersion = 1.1.2
BiosReleaseDate = 11/08/2006
SystemManufacturer = Dell Inc
SystemProductName = Dimension E521
................................................................

Edited by AustrAlien, 27 November 2012 - 09:54 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#6 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 28 November 2012 - 12:05 AM

Attached are the zips you asked for.

Incidentally, auto runs was in the my documents folder. Additionally, there was only one file in the minidump folder.

Thank you for your assistance.

Attached Files



#7 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:48 PM

Posted 28 November 2012 - 12:19 AM

Please check the current time/date your computer is set to: Is it correct?

I ask because the only minidump on the system is dated 2007 !

Let's check the system's settings for saving crash dumps ...

To check your system's "Recoveros" (Recovery) and Page File settings via Windows Management Instrumentation (WMI), please download and then run the following:

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#8 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 28 November 2012 - 12:40 AM

The date and time were correct and did not need to be adjusted.


WMI produces a blank page

#9 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:48 PM

Posted 28 November 2012 - 12:46 AM

Thanks.

Looking at the boot log, I see Symantec's FixTDSS tool is loading very early in the boot sequence.

Loaded driver FixTDSS.sys

What was happening on the system when this problem arose?
  • Were you battling a malware infection at the time?
  • Was/Is there any sign of malware on the system?

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#10 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 28 November 2012 - 12:49 AM

My previous issue was resolved here

Previous Issue

#11 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:48 PM

Posted 28 November 2012 - 01:01 AM

That was some time ago and appears to have been successfully resolved on 19 December 2011.

My questions still stand!

What was happening on the system when this problem arose?

Were you battling a malware infection at the time?
Was/Is there any sign of malware on the system?


AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#12 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 28 November 2012 - 01:08 AM

Norton was identifying an issue and their prescribed fix was not working. There was evidence of malware on the system which was removed with help. I am not sure what the malware items were.

#13 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:08:48 PM

Posted 28 November 2012 - 01:21 AM

Norton was identifying an issue and their prescribed fix was not working. There was evidence of malware on the system which was removed with help. I am not sure what the malware items were.

Hmmm ... I think you are referring to the malware infection you had back in 2011 ???

I am asking about the current situation of not being able to start Windows normally, and getting a Stop: 0x0000007e (0xC000001D, , , ) error when you do attempt it.
When did this problem start, and how long is it since you have been able to start Windows normally?
  • When you last had Windows running normally, was there anything your remember happening at the time that may have subsequently prevented starting Windows normally?
    It may not have been anything to do with a malware infection: It may be some change you made to the system? Perhaps something was installed/uninstalled, or updated?
If you attempt to start Windows normally, do you get the same STOP error every time? Do you perchance see a file name that might prove helpful?
Posted Image

Record the error message details (contained in the areas outlined in red, in the above example image), and post in your reply.
At the bottom-left-side of the BSOD error message, do you see that the dump is saved ("complete") or not saved to the hard drive?

Edited by AustrAlien, 28 November 2012 - 01:22 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#14 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 28 November 2012 - 01:33 AM

My most profound apologies, for some reason I thought you were referring to the previous issue.

The error message is as follows:

Stop:0x0000007e (0xC000001D, 0xF39420B6, 0xF78A2578, 0xF78A2274)

There is no text after that on the Blue Screen

The problem started on a restart after being on vacation. The machine had been shut down while we were away.

#15 revillini

revillini
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:03:48 AM

Posted 28 November 2012 - 01:35 AM

There is no text where you have indicated the "page_fault" should be.

The error first occurred when the machine was powered up after we had been on vacation.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users