BSD ( error code 0XF4), when PC is idle for sometime.

Hi
I just became a member of this forum , after I faced repeated ( 4 times in last month) BSD's on my Windows XP home machine.

The problem started after I installed IE7 , and is continuing to happen even after I uninstalled IE7 and reinstalled IE6.

I have collected the below debug log by analyzing minidump of the latest BSD using the tools that were suggested in this forum.

I need some help in understanding what this debug log means and how is this BSD happening and how to fix it.
If any one can give me some insight into what is causing this by looking at the debug log that would be great.
Since the debug log was huge I have inserted only the top portion of the debug log and have not included the list of processes running when the crash happened , if you need that information pls let me know I will provide the complete debug log.

Thanks in advance for taking a look at this.
-prads
===============DEBUG LOG===============================
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini090607-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Thu Sep 6 11:08:05.781 2007 (GMT-7)
System Uptime: 1 days 13:16:18.372
Loading Kernel Symbols
....................................................................................................................................................
Loading User Symbols
Loading unloaded module list
.........................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 82ebf9f8, 82ebfb6c, 805fa160}

*** ERROR: Module load completed but symbols could not be loaded for iksysflt.sys
Probably caused by : hardware_disk

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 82ebf9f8, Terminating object
Arg3: 82ebfb6c, Process image file name
Arg4: 805fa160, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: 82ebf9f8

IMAGE_NAME: hardware_disk

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAULTING_MODULE: 00000000

PROCESS_NAME: csrss.exe

EXCEPTION_RECORD: f33609d8 -- (.exr 0xfffffffff33609d8)
.exr 0xfffffffff33609d8
ExceptionAddress: 7c936bd1
ExceptionCode: c0000006 (In-page I/O error)
ExceptionFlags: 00000000
NumberParameters: 3
Parameter[0]: 00000000
Parameter[1]: 7c99a3d8
Parameter[2]: c000009a
Inpage operation failed at 7c99a3d8, due to I/O error c000009a

EXCEPTION_CODE: (NTSTATUS) 0xc000009a - Insufficient system resources exist to complete the API.

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The required data was not placed into memory because of an I/O error status of "0x%08lx ".

IO_ERROR: (NTSTATUS) 0xc000009a - Insufficient system resources exist to complete the API.

EXCEPTION_STR: 0xc0000006_c000009a

FAULTING_IP:
+7c936bd1
7c936bd1 ?? ???

BUGCHECK_STR: 0xF4_IOERR_C000009A

STACK_TEXT:
f3360264 8062c623 000000f4 00000003 82ebf9f8 nt!KeBugCheckEx+0x1b
f3360288 805fa11e 805fa160 82ebf9f8 82ebfb6c nt!PspCatchCriticalBreak+0x75
f33602b8 f6b6c18c 82ebfc40 c0000006 f3360584 nt!NtTerminateProcess+0x7d
WARNING: Stack unwind information not available. Following frames may be wrong.
f3360574 804de7ec ffffffff c0000006 f33609b0 iksysflt+0x418c
f3360574 804ddae1 ffffffff c0000006 f33609b0 nt!KiFastCallEntry+0xf8
f33605f4 8051d6de ffffffff c0000006 f33609f8 nt!ZwTerminateProcess+0x11
f33609b0 804fc864 f33609d8 00000000 f3360d64 nt!KiDispatchException+0x3a0
f3360d34 804e206b 0120f26c 0120f28c 00000000 nt!KiRaiseException+0x175
f3360d50 804de7ec 0120f26c 0120f28c 00000000 nt!NtRaiseException+0x31
f3360d50 7c936bd1 0120f26c 0120f28c 00000000 nt!KiFastCallEntry+0xf8
0120f568 00000000 00000000 00000000 00000000 0x7c936bd1


STACK_COMMAND: kb

FOLLOWUP_IP:
+7c99a3d8
7c99a3d8 ?? ???

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: hardware_disk

FAILURE_BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_hardware_disk

BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_hardware_disk

Followup: MachineOwner
---------

eax=ffdff13c ebx=82ebf9f8 ecx=00000000 edx=82ebf9e0 esi=82ebf9f8 edi=82677da8
eip=8053354e esp=f336024c ebp=f3360264 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8053354e 5d pop ebp
ChildEBP RetAddr Args to Child
f3360264 8062c623 000000f4 00000003 82ebf9f8 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f3360288 805fa11e 805fa160 82ebf9f8 82ebfb6c nt!PspCatchCriticalBreak+0x75 (FPO: [Non-Fpo])
f33602b8 f6b6c18c 82ebfc40 c0000006 f3360584 nt!NtTerminateProcess+0x7d (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f3360574 804de7ec ffffffff c0000006 f33609b0 iksysflt+0x418c
f3360574 804ddae1 ffffffff c0000006 f33609b0 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f3360584)
f33605f4 8051d6de ffffffff c0000006 f33609f8 nt!ZwTerminateProcess+0x11 (FPO: [2,0,0])
f33609b0 804fc864 f33609d8 00000000 f3360d64 nt!KiDispatchException+0x3a0 (FPO: [Non-Fpo])
f3360d34 804e206b 0120f26c 0120f28c 00000000 nt!KiRaiseException+0x175 (FPO: [Non-Fpo])
f3360d50 804de7ec 0120f26c 0120f28c 00000000 nt!NtRaiseException+0x31
f3360d50 7c936bd1 0120f26c 0120f28c 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f3360d64)
0120f568 00000000 00000000 00000000 00000000 0x7c936bd1

 

Hi, prads. Welcome to Windows BBS!

I'm sorry I am not an expert at analyzing BSOD dump logs.

In case you have done anything with hard drives/cabling inside your computer case (or just had your hands inside the case, bumping cables around), here is a Windows BBS thread about a similar STOP error which might be helpful.

• Windows BBS: Stop Error 0x000000F4

 

Hi,
I might expect it relates to this:
http://support.microsoft.com/kb/909095

If you have other dumps, check "Insufficient system resources exist to complete the API" is involved in those as well.

Matt

 

Hi mailman: Thanks for the reference, I checked it , it seems a little different than the BSOD I am facing, it seems the reference you quoted has BSOD even after 15min and is related to HW I/O, however I was able to do the memtest indicated in this thread and it passed, so at-least one thing is ruled out for me
Thanks again

 

Hi Matt:
Thanks for the reply, I did notice that similar error "insufficient sys resources..." is shown in other logs too, so I went ahead and installed the update you have indicated above , so far so good 2 days and no BSOD yet!
However it seemed like the update was for RAM > 1G which is not the case for me , but who knows, crossing my fingers on this one.

Thanks again for the reply
-prads

 

It would be good if it worked. Hope so.

Matt

 

Hi Matt
hmm, it did not fix the problem , it crashed again twice in last 4 days. I noticed one more thing it seems like it happens after I use my webcam, just an observation not sure if it is related, any ideas?

Thanks again
-prads

 

Maybe iksysflt.sys is the problem. The link below has exactly the same crash. Uninstall Spyware Doctor.

http://forums.techguy.org/windows-nt-2000-xp/622560-bsod-stop-code-0x000000f4.html

 

"Insufficient resources to complete the API "?

You don't say that this is laptop computer. Standby is geared more towards saving battery power on a laptop computer. I don't use Standby on desktop computers, although on some it seems to work OK (Windows needs to control the BIOS carefully). Assuming this is a desktop, in Control Panel -> (Performance and Maintenance) -> Power Options, if you use Hibernation, disable it. Change the Power Scheme settings to Never. If it is stable, you can work back from there, but the only setting I use for a desktop machine is "Turn off monitor...After 20 minutes ".

This is the basics...
Standby saves your workspace to RAM, it then needs to rely on the computer's BIOS to "wake it up ". Edit: insufficient resources...do you have a lot of programs/files open or "large" (RAM intensive) programs open. Do you have enough RAM for your needs.
Hibernate saves your workspace to the HDD. You can carry out disk cleanup (also go to the Tools menu in IE or any other browser and delete the temporary files and cookies). You can run Error Checking (chkdsk) on your drive/s and do a defragmentation. Do you have plenty of free-space on the (Windows) drive?

As I said, I don't use Standby or Hibernate on desktop computers. See if your power settings may be the cause.

Matt
PS The webcam, look in Add/Remove programs and see if there is software associated with it. You can uninstall the software, reinstall the original software, look for updated software at the manufacturer's website and install that or, I think, even run without software and Windows should control it (I am not a webcam person ).

 

Thanks for the info Peter, I have uninstalled Spyware doctor , and am hoping this will fix the BSOD my PC is having as well.
Question on a related note: I ran chkdsk /f/r as well, but I was not sure what the results were since I was out when PC was doing the chkdsk, by the time I came back the PC had restarted. Are the results of chkdsk stored in some place on the Hard-disk ? Any other means I can confirm if everything was OK during chkdsk? Or does it mean everything is OK if the PC restarts without any issues?

 

Hi Matt: Yes I too had the same doubt regarding installing the patch since I have neither hibernation or standby ON on my PC, but I went ahead with your suggestion since I did not see anything -ve about that patch you indicated, as expected it did not resolve the issue , may be it fixed something which might have happened

Regarding webcam , well I did not use the webcam for about a 3 days now but I still did see the BSOD. But I will try your suggestion of un-installing webcam sw or re-installing the sw. Thanks again for the suggestion, will keep this thread posted how it goes.