DUMP DATA - random restarts and BSOD's

Hi,
I was having this problem a few months ago. In the end I got sick of the numerous hours trying myself and took the computer to a computer repair shop. The repair man said that he needed to wipe the hard drive and reinstall windows.


This improved the problem in that things worked a bit better but I was still having occasional random restarts and system recovered from a serious error but just put up with it as he had my computer in the shop for such a long time. But I am now getting more and more random restarts when using the internet and when trying to play games I am also getting blue screen and error messages which are similar to my original problem before windows was reinstalled.

The blue screens have said Bad_Pool_Caller Stop 0x000000c2 (0x00000007, 0x00000cd4,0x804d21f8, 0x
f89dc9dc) also another one says page_fault_in_non_paged_area and the last one I got was very similar to what was happening to me before it said STOP 0x00000024 (0x001902f8, 0xf896c628, 0xf896c328, 0xf8418a3d)
NTFS.sys - address F8418A3D base at F83E6000

This blue screen last time signalled the start of problems worsening.

I have read all I can about these problems from microsoft and other sources but not being computer minded cannot understand them.

When the computer restarts I send the error to Microsoft and they come back with one of three things:

1.error caused
by graphics device driver (most common report I receive back off MS)

2.problem being researched 2nd most common report I receive back)

3.'Your system crashed because the Random Access Memory containing windows program code was corrupted. Microsoft is unable to determine if this corruption was caused by a hardware or software issue. The nature of the corruption suggests that a hardware issue is more likely'

so far what I have done to try and correct the problem is:

1. Uninstalled and reinstalled windows (the man in the repair shop
done this for me)
2. took out sticks of ram one at a time to see if one was causing the
problem - still had crashes with whatever stick of ram was in - also tried memtest but the computer always restarts when
trying to use it
3. downloaded SiS 315 driver that the microsoft website said I needed
when it scanned my computer
4. checked fans all spinning - they are
5. Tried running the computer with the sides of the case off to see if
it would help - (if the problem was tempature).
6. Send error reports to microsoft - it comes back with error caused
by graphics device driver or problem being researched
7. Downloaded latest SiS 315 driver from SiS website

I have included dump file from Dr watson folder below as this was suggested in my original problem (hope its OK as I have never done this before):



Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 UP Free x86 compatible
Debug session time: Mon Oct 11 17:28:18 2004
System Uptime: not available
Process Uptime: not available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
...............................................................................................
(f0f0f0f0.13c): Access violation - code c0000005 (!!! second chance !!!)
eax=0013c0ef ebx=0000040e ecx=75f87710 edx=0013c0f0 esi=00000000 edi=0013d1c4
eip=75f90298 esp=0013c0c8 ebp=0013c0d8 iopl=0 nv up ei pl nz ac pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000212
BROWSEUI!CShellBrowser2::GetControlWindow+0x17:
75f90298 8933 mov [ebx],esi ds:0023:0000040e=????????
0:000> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

 

I have just done the debug thing again because even though I don't know much I thought that exception sounded wrong and it was exactly the same as the one above except this time it had

ERROR: Symbol file could not be found. Defaulted to export symbols for SHDOCVW.dll -

below the exception analysis

Just thought I had better put that down in case its useful.

 

As the fault wasn't fixed by the repair shop, I would borrow two thing from him. Another video card and 1 stick of memory. Also make sure you have SP2 installed. I read that SP2 has fixed some stop errors relating to hardware and software incompatibilities. Make sure you install the latest drivers for any video card, rather than use the generic ones that ship with XP.

 

thanks Paul - can't see him doing that though - lets say we didn't exactly hit it off especially as he messed me about for weeks on end.

Anyway I have just realised that there are other places to get a minidump from for analysis and the below one is from minidump file I found somewhere on my computer (can't remember how I got to it now ) Thought I'd post it as again I don't know whats useful and what is not. It keeps saying memory this and problem caused by memory corruption so is this the answer or could it lie with this and something else?


----------------------------------------------------------------------------------------------------------------------------------------------------


Probably caused by : memory_corruption

Followup: memory_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: e8804d8d, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 805fd42d, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.


READ_ADDRESS: unable to get nt!MmPoolCodeEnd
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSpecialPoolStart
unable to get nt!MmPagedPoolStart
unable to get nt!MiSessionPoolStart
unable to get nt!MiSessionPoolEnd
unable to get nt!MmNonPagedPoolExpansionStart
unable to get nt!MmPoolCodeStart
e8804d8d

FAULTING_IP:
nt!LsaDeregisterLogonProcess+16703
805fd42d a08d4d80e8 mov al,[e8804d8d]

MM_INTERNAL_CODE: 2

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from 8050cd79 to 804ef4ff

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
a1e6dbbc 8050cd79 00000050 e8804d8d 00000000 nt!KeBugCheckEx+0x19
a1e6dc08 8052af70 00000000 e8804d8d 00000000 nt!MmTrimAllSystemPagableMemory+0x4f1f
a1e6dc20 8058757b a1e6dd64 0232ea58 805864cc nt!Kei386EoiHelper+0x2388
00000202 00000000 00000000 00000000 00000000 nt!NtAllocateVirtualMemory+0x10af


STACK_COMMAND: .bugcheck ; kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
!chkimg -lo 50 -d !nt
8052c362-8052c373 18 bytes - nt!KiDispatchInterrupt+222 [ d8 0f 22 d8 c3 0f 20 e0:e0 25 7f ff ff ff 0f 22 ]
8052c37a - nt!KiDispatchInterrupt+23a (+0x18) [ c3:00 ]
19 errors : !nt (8052c362-8052c37a)

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: LARGE

BUCKET_ID: MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------

eax=ffdff13c ebx=00000050 ecx=a1e6dc20 edx=8052c689 esi=c03a2010 edi=c0300e88
eip=804ef4ff esp=a1e6dba4 ebp=a1e6dbbc iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
804ef4ff 5d pop ebp
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
a1e6dbbc 8050cd79 00000050 e8804d8d 00000000 nt!KeBugCheckEx+0x19
a1e6dc08 8052af70 00000000 e8804d8d 00000000 nt!MmTrimAllSystemPagableMemory+0x4f1f
a1e6dc20 8058757b a1e6dd64 0232ea58 805864cc nt!Kei386EoiHelper+0x2388
00000202 00000000 00000000 00000000 00000000 nt!NtAllocateVirtualMemory+0x10af
start end module name
804d0000 80699e80 nt ntoskrnl.exe Mon Feb 25 23:32:36 2002 (3C7AC994)
8069a000 806ad280 hal halacpi.dll Fri Aug 17 21:48:11 2001 (3B7D830B)
a18d0000 a18d3500 asyncmac asyncmac.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
a1a3c000 a1a62e00 kmixer kmixer.sys Fri Aug 17 22:00:45 2001 (3B7D85FD)
a1a63000 a1a7ee00 aec aec.sys Thu Jul 19 20:33:06 2001 (3B5735F2)
a1a7f000 a1a92700 wdmaud wdmaud.sys Sat Aug 18 04:42:48 2001 (3B7DE438)
a1abb000 a1acda00 ipnat ipnat.sys Fri Aug 17 21:55:11 2001 (3B7D84AF)
a1b96000 a1ba3400 swmidi swmidi.sys Fri Aug 17 22:00:42 2001 (3B7D85FA)
a1ba6000 a1bb4080 sysaudio sysaudio.sys Sat Aug 18 04:47:26 2001 (3B7DE54E)
a1c5e000 a1caea80 srv srv.sys Sat Aug 18 02:32:06 2001 (3B7DC596)
a1d4f000 a1d79280 mrxdav mrxdav.sys Fri Aug 17 21:50:20 2001 (3B7D838C)
a1e4a000 a1e4ce80 secdrv secdrv.sys Fri Jan 16 13:16:04 2004 (4007E414)
a1f82000 a1fa1e80 afd afd.sys Sat Aug 18 02:30:36 2001 (3B7DC53C)
a2072000 a207e380 DMusic DMusic.sys Fri Aug 17 21:59:49 2001 (3B7D85C5)
a209a000 a209cf80 ndisuio ndisuio.sys Fri Aug 17 21:53:53 2001 (3B7D8461)
a21c2000 a21d7280 dump_atapi dump_atapi.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
a21d8000 a223b880 mrxsmb mrxsmb.sys Sat Aug 18 04:31:45 2001 (3B7DE1A1)
a2264000 a228c000 rdbss rdbss.sys Sat Aug 18 04:44:30 2001 (3B7DE49E)
a228c000 a22b0b00 netbt netbt.sys Sat Aug 18 02:32:18 2001 (3B7DC5A2)
a22b1000 a2300e00 tcpip tcpip.sys Sat Aug 18 02:31:44 2001 (3B7DC580)
a2321000 a23373e0 P1131Vid P1131Vid.sys Wed Feb 18 08:16:12 2004 (40331F4C)
a2358000 a235b900 watchdog watchdog.sys Fri Aug 17 21:59:35 2001 (3B7D85B7)
bf800000 bf9b7580 win32k win32k.sys Sat Aug 18 04:52:56 2001 (3B7DE698)
bf9b8000 bfac1280 SiSGRV SiSGRV.dll Sat Aug 16 02:05:49 2003 (3F3D836D)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 22:55:56 2001 (3B7D92EC)
f808b000 f80ac780 update update.sys Sat Aug 18 04:53:56 2001 (3B7DE6D4)
f80ad000 f80d9580 rdpdr rdpdr.sys Fri Aug 17 21:50:45 2001 (3B7D83A5)
f8102000 f8112180 psched psched.sys Fri Aug 17 21:54:25 2001 (3B7D8481)
f8113000 f8128900 ndiswan ndiswan.sys Sat Aug 18 02:30:58 2001 (3B7DC552)
f8129000 f813b980 parport parport.sys Fri Aug 17 21:50:05 2001 (3B7D837D)
f813c000 f819b900 ALCXSENS ALCXSENS.SYS Thu Dec 11 11:38:41 2003 (3FD85741)
f819c000 f81bcf80 portcls portcls.sys Sat Aug 18 04:31:59 2001 (3B7DE1AF)
f81bd000 f824fc00 ALCXWDM ALCXWDM.SYS Wed Feb 18 15:51:07 2004 (403389EB)
f8267000 f8285180 USBPORT USBPORT.SYS Fri Aug 17 22:03:07 2001 (3B7D868B)
f8286000 f82a5d00 ks ks.sys Wed Dec 04 17:09:38 2002 (3DEE36D2)
f82a6000 f82f8c00 ham50 ham50.sys Thu Apr 19 20:52:03 2001 (3ADF41E3)
f82f9000 f835b480 sisgrp sisgrp.sys Sat Aug 16 01:59:05 2003 (3F3D81D9)
f835c000 f835e280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
f836c000 f836ff00 MODEMCSA MODEMCSA.sys Fri Aug 17 21:57:37 2001 (3B7D8541)
f83a4000 f83bd600 Mup Mup.sys Sat Aug 18 04:21:29 2001 (3B7DDF39)
f83be000 f83e5700 NDIS NDIS.sys Sat Aug 18 02:31:13 2001 (3B7DC561)
f83e6000 f8468400 Ntfs Ntfs.sys Sat Aug 18 02:33:04 2001 (3B7DC5D0)
f8469000 f847c780 KSecDD KSecDD.sys Fri Aug 17 21:50:01 2001 (3B7D8379)
f847d000 f848e300 sr sr.sys Fri Aug 17 22:00:38 2001 (3B7D85F6)
f848f000 f84a4280 atapi atapi.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
f84a5000 f84c8b80 dmio dmio.sys Fri Aug 17 21:58:27 2001 (3B7D8573)
f84c9000 f84e7880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f84e8000 f8513c00 ACPI ACPI.sys Fri Aug 17 21:57:52 2001 (3B7D8550)
f8535000 f8544400 pci pci.sys Fri Aug 17 21:58:04 2001 (3B7D855C)
f8545000 f854dc00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f8555000 f855e280 MountMgr MountMgr.sys Fri Aug 17 21:47:36 2001 (3B7D82E8)
f8565000 f8571000 VolSnap VolSnap.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f8575000 f857d380 disk disk.sys Fri Aug 17 21:52:31 2001 (3B7D840F)
f8585000 f858ff80 CLASSPNP CLASSPNP.SYS Sat Aug 18 02:32:31 2001 (3B7DC5AF)
f85d5000 f85e2b00 ipsec ipsec.sys Sat Aug 18 02:30:42 2001 (3B7DC542)
f85e5000 f85ed180 netbios netbios.sys Fri Aug 17 21:54:00 2001 (3B7D8468)
f85f5000 f85fd880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
f8605000 f860d200 wanarp wanarp.sys Fri Aug 17 21:55:23 2001 (3B7D84BB)
f8635000 f8644300 Cdfs Cdfs.SYS Sat Aug 18 04:33:34 2001 (3B7DE20E)
f8685000 f8694e00 VIDEOPRT VIDEOPRT.SYS Fri Aug 17 21:57:42 2001 (3B7D8546)
f8695000 f869e980 Imapi Imapi.SYS Fri Aug 17 21:53:17 2001 (3B7D843D)
f86a5000 f86b0980 cdrom cdrom.sys Fri Aug 17 21:52:25 2001 (3B7D8409)
f86b5000 f86c2a00 redbook redbook.sys Fri Aug 17 21:51:37 2001 (3B7D83D9)
f86c5000 f86d3000 drmk drmk.sys Fri Aug 17 22:01:08 2001 (3B7D8614)
f86d5000 f86e4400 serial serial.sys Sat Aug 18 04:27:19 2001 (3B7DE097)
f86e5000 f86f1700 i8042prt i8042prt.sys Sat Aug 18 04:44:51 2001 (3B7DE4B3)
f86f5000 f8700e00 rasl2tp rasl2tp.sys Sat Aug 18 02:30:47 2001 (3B7DC547)
f8705000 f870e800 raspppoe raspppoe.sys Fri Aug 17 21:55:33 2001 (3B7D84C5)
f8715000 f8720580 raspptp raspptp.sys Sat Aug 18 02:30:51 2001 (3B7DC54B)
f8725000 f872d400 msgpc msgpc.sys Fri Aug 17 21:54:19 2001 (3B7D847B)
f8745000 f874e380 termdd termdd.sys Fri Aug 17 21:46:42 2001 (3B7D82B2)
f8785000 f878e480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f8795000 f87a1600 usbhub usbhub.sys Fri Aug 17 22:03:11 2001 (3B7D868F)
f87a5000 f87b0d80 STREAM STREAM.SYS Fri Jul 09 11:48:03 2004 (40EE77E3)
f87b5000 f87bac80 PCIIDEX PCIIDEX.SYS Fri Aug 17 21:51:46 2001 (3B7D83E2)
f87bd000 f87c1900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f87c5000 f87cbb00 viaagp viaagp.sys Fri Aug 17 21:58:00 2001 (3B7D8558)
f87cd000 f87d3d00 viaagp1 viaagp1.sys Wed Jul 02 11:08:01 2003 (3F02AF01)
f880d000 f8814780 processr processr.sys Fri Aug 17 21:48:32 2001 (3B7D8320)
f8815000 f881c080 Modem Modem.SYS Fri Aug 17 21:57:35 2001 (3B7D853F)
f881d000 f8821a00 usbuhci usbuhci.sys Fri Aug 17 22:03:04 2001 (3B7D8688)
f8825000 f8826000 fdc fdc.sys unavailable (00000000)
f882d000 f8832600 mouclass mouclass.sys Fri Aug 17 21:47:50 2001 (3B7D82F6)
f8835000 f883ab80 kbdclass kbdclass.sys Fri Aug 17 21:47:47 2001 (3B7D82F3)
f8845000 f8849580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f884d000 f8851080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f8855000 f8859d00 flpydisk flpydisk.sys Fri Aug 17 21:51:21 2001 (3B7D83C9)
f886d000 f8871c80 vga vga.sys Fri Aug 17 21:57:51 2001 (3B7D854F)
f8875000 f8879680 Msfs Msfs.SYS Fri Aug 17 21:50:02 2001 (3B7D837A)
f887d000 f8884380 Npfs Npfs.SYS Fri Aug 17 21:50:03 2001 (3B7D837B)
f8945000 f8948000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
f89c5000 f89c7b00 srvkp srvkp.sys Thu Jul 03 10:12:53 2003 (3F03F395)
f89ed000 f89f0a80 serenum serenum.sys Fri Aug 17 21:50:13 2001 (3B7D8385)
f89f1000 f89f3c00 kbfilter kbfilter.SYS Tue Nov 27 07:07:19 2001 (3C033BA7)
f89f5000 f89f7600 gameenum gameenum.sys Fri Aug 17 22:02:29 2001 (3B7D8665)
f89f9000 f89fb580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f89fd000 f8a00f80 TDI TDI.SYS Fri Aug 17 21:57:25 2001 (3B7D8535)
f8a35000 f8a36b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
f8a37000 f8a38100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8a39000 f8a3a800 viaidexp viaidexp.sys Thu Oct 18 07:12:14 2001 (3BCE72BE)
f8a3b000 f8a3c700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
f8a55000 f8a56280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
f8a57000 f8a58600 splitter splitter.sys Fri Aug 17 22:00:42 2001 (3B7D85FA)
f8a5b000 f8a5cf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
f8a5d000 f8a5e080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
f8a5f000 f8a60080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
f8a61000 f8a62080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
f8a7d000 f8a7e100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8a9b000 f8a9ca80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
f8a9d000 f8a9e2a0 WBHWDOCT WBHWDOCT.SYS Thu Dec 27 02:17:40 2001 (3C2A84C4)
f8b63000 f8b63d00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)
f8b80000 f8b80c00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
f8b9e000 f8b9eb00 drmkaud drmkaud.sys Fri Aug 17 22:01:13 2001 (3B7D8619)
f8c71000 f8c72000 swenum swenum.sys Wed Dec 04 17:10:07 2002 (3DEE36EF)
f8c78000 f8c78b80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)
f8c84000 f8c84860 BANTExt BANTExt.sys Thu May 28 03:43:29 1998 (356CCF51)

Unloaded modules:
f8865000 f886a000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8360000 f8363000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

----------------------------------------------------------------------------------------------------------------------------------------------------



I have also tried to use the other minidumps I found from the same location I had the above but am getting this message now:




----------------------------------------------------------------------------------------------------------------------------------------------------

ened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini101004-20.dmp]
Could not open dump file [C:\WINDOWS\Minidump\Mini101004-20.dmp], Win32 error 1392
"The file or directory is corrupted and unreadable. "


----------------------------------------------------------------------------------------------------------------------------------------------------




Thank you for your help

 

We have a member with the same last name as my home city who is right into dump data analyst. That's one area I will NEVER get into. So you should get some help there soon.

If you can borrow from someone some memory (128 MB stick will be enough for testing) and a graphics card it may help.

 

This latest STOP 50 is bad news. The memory is hosed. The area of memory that got whacked is in such a place that unless you have a driver on crack, you have bad ram.

Wait a minute.. what do we have here...

BANTExt.sys Thu May 28 03:43:29 1998 (356CCF51)

Using my powers of deduction, i see that you have a driver that was written 2 years before XP came out. May i say to you that this driver is not welcome. Looking around on the web though, this thing doesnt seem to do much directly related to the system. But i dont like it, not one bit. Nuke it.

STOP 0x000000c2 (0x00000007, 0x00000cd4,0x804d21f8, 0xf89dc9dc)
STOP 0x00000024 (0x001902f8, 0xf896c628, 0xf896c328, 0xf8418a3d)

Both of these other errors indicate some sort of memory shenanigans. the c2 is a double free and the 24 is the result of bad pool memory.

I notice you are not on SP2 yet, why is that? Having some of the sp2 code on here could help. Its certainly not going to make it any worse.

It is my diagnosis that your memory is going bad. I recommend obtaining a new stick (preferably on loan) to test with, and/or taking your existing ram to a shop with a HARDWARE memory analyzer (this is a little box that can do a great job of finding problems).

I cannot be 100% sure about this, since we are diagnosing a hardware failure through software. I would need quite a bit more data to be sure, but a stop 50 in the manner you received is a pretty high confidence indicator.

Once you have done that, report back and lets see where you stand. Worst case scenario, the RAM comes back good, we have to collect more dumps and try to develop a new thoery.

 

Thank you for your help Joe

I am unsure what a driver on crack means but if it is like cracked games I do not have any of these unless the man in the computer shop put them in. The only driver I have knowingly changed has been the graphics card driver.

With the Bantext.sys - do I simply delete this? and if so do I replace it with anything?

I know this probably sounds stupid but I am unsure how to download sp2. I know how to go to windows update and it says express install or custom install but that is about it. Perhaps one of my friends will have it on disk I will ask them.

I will try to find a shop with a hardware memory analyser today (or in the next few days if I don't get time).

However I do have an old computer from a few years ago that has just been sitting around and I think that this has 128mb Ram in it - but it is not the DDR type - would this be OK to try or is it too small or something? Also does any stick of ram fit any computer? If I take out the stick of ram from my old computer is it suitable for the one I have now?

I had a new error message from microsoft error report today after a restart today which I thought I'd put down just in case its useful as its an error message I have had for the first time:

------------------------------------------------------
Thank you for submitting an error report. The error was likely caused by:
A hardware failure reported by your Central Processing Unit (CPU)
This behavior occurs because your computer processor detected an unrecoverable hardware error and reported it to Windows. For more information, contact the manufacturer of your computer.
--------------------------------------------------------------------------
--------------------------------------------------------------------------





I think, but am not 100% sure, that this was the log for the error message above (again don't know if it helps, sorry if it doesn't)




----------------------------------------------------------------------------------------------------------------------------------------------------
Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini101204-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntoskrnl.exe -
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt
Built by: 2600.xpclnt_qfe.010827-1803
Kernel base = 0x804d0000 PsLoadedModuleList = 0x8053e028
Debug session time: Tue Oct 12 10:30:40 2004
System Uptime: 0 days 0:02:23.396
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntoskrnl.exe -
Loading Kernel Symbols
............................................................................................................
Loading unloaded module list
.........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {3f, ff, 1, 806a112f}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : ntoskrnl.exe ( nt!Kei386EoiHelper+257d )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000003f, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 806a112f, address which referenced memory

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.


WRITE_ADDRESS: unable to get nt!MmPoolCodeEnd
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSpecialPoolStart
unable to get nt!MmPagedPoolStart
unable to get nt!MiSessionPoolStart
unable to get nt!MiSessionPoolEnd
unable to get nt!MmNonPagedPoolExpansionStart
unable to get nt!MmPoolCodeStart
0000003f

CURRENT_IRQL: ff

FAULTING_IP:
hal!KiI8259MaskTable+43
806a112f ff00 inc dword ptr [eax]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 8052b165 to 804ef4ff

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
8053403c 8052b165 0000000a 0000003f 000000ff nt!KeBugCheckEx+0x19
80534058 8053408c 804e7fc0 f82bf116 00000074 nt!Kei386EoiHelper+0x257d
823a9b48 00000000 00000000 00000000 00000000 nt!NtBuildNumber+0x42a4


FOLLOWUP_IP:
nt!Kei386EoiHelper+257d
8052b165 f7457000000200 test dword ptr [ebp+0x70],0x20000

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!Kei386EoiHelper+257d

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3c7ac994

STACK_COMMAND: kb

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=00000000 esi=806a112f edi=0000003f
eip=804ef4ff esp=80534024 ebp=8053403c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
804ef4ff 5d pop ebp
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
8053403c 8052b165 0000000a 0000003f 000000ff nt!KeBugCheckEx+0x19
80534058 8053408c 804e7fc0 f82bf116 00000074 nt!Kei386EoiHelper+0x257d
823a9b48 00000000 00000000 00000000 00000000 nt!NtBuildNumber+0x42a4
start end module name
804d0000 80699e80 nt ntoskrnl.exe Mon Feb 25 23:32:36 2002 (3C7AC994)
8069a000 806ad280 hal halacpi.dll Fri Aug 17 21:48:11 2001 (3B7D830B)
a1525000 a154be00 kmixer kmixer.sys Fri Aug 17 22:00:45 2001 (3B7D85FD)
a198b000 a199e700 wdmaud wdmaud.sys Sat Aug 18 04:42:48 2001 (3B7DE438)
a1b5a000 a1b5d500 asyncmac asyncmac.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
a1b72000 a1b84a00 ipnat ipnat.sys Fri Aug 17 21:55:11 2001 (3B7D84AF)
a1bbd000 a1bcb080 sysaudio sysaudio.sys Sat Aug 18 04:47:26 2001 (3B7DE54E)
a1c4d000 a1c9da80 srv srv.sys Sat Aug 18 02:32:06 2001 (3B7DC596)
a1d66000 a1d90280 mrxdav mrxdav.sys Fri Aug 17 21:50:20 2001 (3B7D838C)
a1e49000 a1e4be80 secdrv secdrv.sys Fri Jan 16 13:16:04 2004 (4007E414)
a2011000 a2030e80 afd afd.sys Sat Aug 18 02:30:36 2001 (3B7DC53C)
a20a9000 a20abf80 ndisuio ndisuio.sys Fri Aug 17 21:53:53 2001 (3B7D8461)
a21d9000 a21ee280 dump_atapi dump_atapi.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
a21ef000 a2252880 mrxsmb mrxsmb.sys Sat Aug 18 04:31:45 2001 (3B7DE1A1)
a227b000 a22a3000 rdbss rdbss.sys Sat Aug 18 04:44:30 2001 (3B7DE49E)
a22a3000 a22c7b00 netbt netbt.sys Sat Aug 18 02:32:18 2001 (3B7DC5A2)
a22c8000 a2317e00 tcpip tcpip.sys Sat Aug 18 02:31:44 2001 (3B7DC580)
bf800000 bf9b7580 win32k win32k.sys Sat Aug 18 04:52:56 2001 (3B7DE698)
bf9b8000 bfac1280 SiSGRV SiSGRV.dll Sat Aug 16 02:05:49 2003 (3F3D836D)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 22:55:56 2001 (3B7D92EC)
f80a2000 f80c3780 update update.sys Sat Aug 18 04:53:56 2001 (3B7DE6D4)
f80ec000 f8118580 rdpdr rdpdr.sys Fri Aug 17 21:50:45 2001 (3B7D83A5)
f8119000 f8129180 psched psched.sys Fri Aug 17 21:54:25 2001 (3B7D8481)
f812a000 f813f900 ndiswan ndiswan.sys Sat Aug 18 02:30:58 2001 (3B7DC552)
f8140000 f8152980 parport parport.sys Fri Aug 17 21:50:05 2001 (3B7D837D)
f8153000 f81b2900 ALCXSENS ALCXSENS.SYS Thu Dec 11 11:38:41 2003 (3FD85741)
f81b3000 f81d3f80 portcls portcls.sys Sat Aug 18 04:31:59 2001 (3B7DE1AF)
f81d4000 f8266c00 ALCXWDM ALCXWDM.SYS Wed Feb 18 15:51:07 2004 (403389EB)
f8267000 f8285180 USBPORT USBPORT.SYS Fri Aug 17 22:03:07 2001 (3B7D868B)
f8286000 f82a5d00 ks ks.sys Wed Dec 04 17:09:38 2002 (3DEE36D2)
f82a6000 f82f8c00 ham50 ham50.sys Thu Apr 19 20:52:03 2001 (3ADF41E3)
f82f9000 f835b480 sisgrp sisgrp.sys Sat Aug 16 01:59:05 2003 (3F3D81D9)
f8360000 f8363f00 MODEMCSA MODEMCSA.sys Fri Aug 17 21:57:37 2001 (3B7D8541)
f83a4000 f83bd600 Mup Mup.sys Sat Aug 18 04:21:29 2001 (3B7DDF39)
f83be000 f83e5700 NDIS NDIS.sys Sat Aug 18 02:31:13 2001 (3B7DC561)
f83e6000 f8468400 Ntfs Ntfs.sys Sat Aug 18 02:33:04 2001 (3B7DC5D0)
f8469000 f847c780 KSecDD KSecDD.sys Fri Aug 17 21:50:01 2001 (3B7D8379)
f847d000 f848e300 sr sr.sys Fri Aug 17 22:00:38 2001 (3B7D85F6)
f848f000 f84a4280 atapi atapi.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
f84a5000 f84c8b80 dmio dmio.sys Fri Aug 17 21:58:27 2001 (3B7D8573)
f84c9000 f84e7880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f84e8000 f8513c00 ACPI ACPI.sys Fri Aug 17 21:57:52 2001 (3B7D8550)
f8535000 f8544400 pci pci.sys Fri Aug 17 21:58:04 2001 (3B7D855C)
f8545000 f854dc00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f8555000 f855e280 MountMgr MountMgr.sys Fri Aug 17 21:47:36 2001 (3B7D82E8)
f8565000 f8571000 VolSnap VolSnap.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f8575000 f857d380 disk disk.sys Fri Aug 17 21:52:31 2001 (3B7D840F)
f8585000 f858ff80 CLASSPNP CLASSPNP.SYS Sat Aug 18 02:32:31 2001 (3B7DC5AF)
f85b5000 f85c0580 raspptp raspptp.sys Sat Aug 18 02:30:51 2001 (3B7DC54B)
f85c5000 f85cd400 msgpc msgpc.sys Fri Aug 17 21:54:19 2001 (3B7D847B)
f85d5000 f85de380 termdd termdd.sys Fri Aug 17 21:46:42 2001 (3B7D82B2)
f8655000 f865e480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f8665000 f8671600 usbhub usbhub.sys Fri Aug 17 22:03:11 2001 (3B7D868F)
f8675000 f8682b00 ipsec ipsec.sys Sat Aug 18 02:30:42 2001 (3B7DC542)
f8685000 f868d180 netbios netbios.sys Fri Aug 17 21:54:00 2001 (3B7D8468)
f8695000 f869d880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
f86a5000 f86ad200 wanarp wanarp.sys Fri Aug 17 21:55:23 2001 (3B7D84BB)
f86b5000 f86c4300 Cdfs Cdfs.SYS Sat Aug 18 04:33:34 2001 (3B7DE20E)
f8725000 f8734e00 VIDEOPRT VIDEOPRT.SYS Fri Aug 17 21:57:42 2001 (3B7D8546)
f8735000 f873e980 Imapi Imapi.SYS Fri Aug 17 21:53:17 2001 (3B7D843D)
f8745000 f8750980 cdrom cdrom.sys Fri Aug 17 21:52:25 2001 (3B7D8409)
f8755000 f8762a00 redbook redbook.sys Fri Aug 17 21:51:37 2001 (3B7D83D9)
f8765000 f8773000 drmk drmk.sys Fri Aug 17 22:01:08 2001 (3B7D8614)
f8775000 f8784400 serial serial.sys Sat Aug 18 04:27:19 2001 (3B7DE097)
f8785000 f8791700 i8042prt i8042prt.sys Sat Aug 18 04:44:51 2001 (3B7DE4B3)
f8795000 f87a0e00 rasl2tp rasl2tp.sys Sat Aug 18 02:30:47 2001 (3B7DC547)
f87a5000 f87ae800 raspppoe raspppoe.sys Fri Aug 17 21:55:33 2001 (3B7D84C5)
f87b5000 f87bac80 PCIIDEX PCIIDEX.SYS Fri Aug 17 21:51:46 2001 (3B7D83E2)
f87bd000 f87c1900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f87c5000 f87cbb00 viaagp viaagp.sys Fri Aug 17 21:58:00 2001 (3B7D8558)
f87cd000 f87d3d00 viaagp1 viaagp1.sys Wed Jul 02 11:08:01 2003 (3F02AF01)
f883d000 f8844780 processr processr.sys Fri Aug 17 21:48:32 2001 (3B7D8320)
f8845000 f884c080 Modem Modem.SYS Fri Aug 17 21:57:35 2001 (3B7D853F)
f884d000 f8851a00 usbuhci usbuhci.sys Fri Aug 17 22:03:04 2001 (3B7D8688)
f8855000 f8856000 fdc fdc.sys unavailable (00000000)
f885d000 f8862600 mouclass mouclass.sys Fri Aug 17 21:47:50 2001 (3B7D82F6)
f8865000 f886ab80 kbdclass kbdclass.sys Fri Aug 17 21:47:47 2001 (3B7D82F3)
f886d000 f8871580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f8875000 f8879080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f887d000 f8881d00 flpydisk flpydisk.sys Fri Aug 17 21:51:21 2001 (3B7D83C9)
f889d000 f88a1c80 vga vga.sys Fri Aug 17 21:57:51 2001 (3B7D854F)
f88a5000 f88a9680 Msfs Msfs.SYS Fri Aug 17 21:50:02 2001 (3B7D837A)
f88ad000 f88b4380 Npfs Npfs.SYS Fri Aug 17 21:50:03 2001 (3B7D837B)
f8945000 f8948000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
f89d1000 f89d3280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
f89d9000 f89dbb00 srvkp srvkp.sys Thu Jul 03 10:12:53 2003 (3F03F395)
f8a01000 f8a04a80 serenum serenum.sys Fri Aug 17 21:50:13 2001 (3B7D8385)
f8a05000 f8a07c00 kbfilter kbfilter.SYS Tue Nov 27 07:07:19 2001 (3C033BA7)
f8a09000 f8a0b600 gameenum gameenum.sys Fri Aug 17 22:02:29 2001 (3B7D8665)
f8a0d000 f8a0f580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f8a11000 f8a14f80 TDI TDI.SYS Fri Aug 17 21:57:25 2001 (3B7D8535)
f8a29000 f8a2c900 watchdog watchdog.sys Fri Aug 17 21:59:35 2001 (3B7D85B7)
f8a35000 f8a36b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
f8a37000 f8a38100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8a39000 f8a3a800 viaidexp viaidexp.sys Thu Oct 18 07:12:14 2001 (3BCE72BE)
f8a3b000 f8a3c700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
f8a53000 f8a54280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
f8a5f000 f8a60f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
f8a61000 f8a62080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
f8a63000 f8a64080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
f8a65000 f8a66080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
f8a83000 f8a84100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8aa3000 f8aa4a80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
f8aa5000 f8aa62a0 WBHWDOCT WBHWDOCT.SYS Thu Dec 27 02:17:40 2001 (3C2A84C4)
f8b5f000 f8b5fc00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
f8b64000 f8b65000 swenum swenum.sys Wed Dec 04 17:10:07 2002 (3DEE36EF)
f8b7a000 f8b7ab80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)
f8b86000 f8b86860 BANTExt BANTExt.sys Thu May 28 03:43:29 1998 (356CCF51)
f8c4d000 f8c4dd00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)

Unloaded modules:
a17a4000 a17cb000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a1a3f000 a1a66000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8be9000 f8bea000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a1a66000 a1a82000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a1b3a000 a1b47000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
a1e01000 a1e0f000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8a5b000 f8a5d000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8895000 f889a000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f89cd000 f89d0000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


--------------------------------------------------------------------------
--------------------------------------------------------------------------


Thanks again for your help Joe

 

lol

Oops - I was going to make a bad joke about that as well - then I thought no keep it serious . LOL. Sorry

 

I hope I am not complicating matters by adding this, when I have already added another debug report today, but all today I have been suffering from an error message saying:

IExplorer has encountered a problem and needs to close

Then the open internet pages close.

This is the report from dr watson memory dump:

----------------------------------------------------------------------------------------------------------------------------------------------------


Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 UP Free x86 compatible
Debug session time: Tue Oct 12 20:40:53 2004
System Uptime: not available
Process Uptime: not available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
..................................................................................................
(f0f0f0f0.2d8): Access violation - code c0000005 (!!! second chance !!!)
eax=02ffffff ebx=03b78a28 ecx=03b78770 edx=00000001 esi=00000060 edi=00000000
eip=7492c79e esp=03b786e0 ebp=03b78710 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
*** ERROR: Symbol file could not be found. Defaulted to export symbols for mshtml.dll -
mshtml!DllGetClassObject+0x69cd9:
7492c79e 8b0e mov ecx,[esi] ds:0023:00000060=????????
0:013> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************


FAULTING_IP:
mshtml!DllGetClassObject+69cd9
7492c79e 8b0e mov ecx,[esi]

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
.exr ffffffffffffffff
ExceptionAddress: 7492c79e (mshtml!DllGetClassObject+0x00069cd9)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000060
Attempt to read from address 00000060

DEFAULT_BUCKET_ID: APPLICATION_FAULT

PROCESS_NAME: iexplore.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 00000060

BUGCHECK_STR: ACCESS_VIOLATION

THREAD_ATTRIBUTES:
LAST_CONTROL_TRANSFER: from 7492c754 to 7492c79e

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
03b78710 7492c754 03b78770 00000004 00000060 mshtml!DllGetClassObject+0x69cd9
03b78788 7492cb32 00000000 00000004 03b7888c mshtml!DllGetClassObject+0x69c8f
03b7886c 00000000 00000000 00000000 01836e60 mshtml!DllGetClassObject+0x6a06d


FOLLOWUP_IP:
mshtml!DllGetClassObject+69cd9
7492c79e 8b0e mov ecx,[esi]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: mshtml!DllGetClassObject+69cd9

MODULE_NAME: mshtml

IMAGE_NAME: mshtml.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 3b7dfe1f

STACK_COMMAND: .ecxr ; kb

BUCKET_ID: ACCESS_VIOLATION_mshtml!DllGetClassObject+69cd9

Followup: MachineOwner
---------

eax=02ffffff ebx=03b78a28 ecx=03b78770 edx=00000001 esi=00000060 edi=00000000
eip=7492c79e esp=03b786e0 ebp=03b78710 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
mshtml!DllGetClassObject+0x69cd9:
7492c79e 8b0e mov ecx,[esi] ds:0023:00000060=????????
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
03b78710 7492c754 03b78770 00000004 00000060 mshtml!DllGetClassObject+0x69cd9
03b78788 7492cb32 00000000 00000004 03b7888c mshtml!DllGetClassObject+0x69c8f
03b7886c 00000000 00000000 00000000 01836e60 mshtml!DllGetClassObject+0x6a06d
start end module name
00400000 00419000 iexplore iexplore.exe Fri Aug 17 21:49:16 2001 (3B7D834C)
04e60000 05007000 Flash Flash.ocx Mon Dec 08 22:01:56 2003 (3FD4F4D4)
0ffa0000 0ffc1000 dssenh dssenh.dll Sun Jul 15 08:28:46 2001 (3B51462E)
0ffd0000 0fff2000 rsaenh rsaenh.dll Sun Jul 15 08:28:46 2001 (3B51462E)
10000000 10010000 jccatch jccatch.dll Wed Jan 16 11:12:18 2002 (3C456012)
1f7b0000 1f7e1000 ODBC32 ODBC32.dll Fri Jul 13 17:30:45 2001 (3B4F2235)
1f850000 1f866000 odbcint odbcint.dll Fri Jul 13 17:30:45 2001 (3B4F2235)
51000000 51049000 DDRAW DDRAW.dll Fri Jul 09 10:52:57 2004 (40EE6AF9)
5ad70000 5ada4000 uxtheme uxtheme.dll Sat Aug 18 06:36:15 2001 (3B7DFECF)
5b0a0000 5b0a7000 umdmxfrm umdmxfrm.dll Sat Aug 18 06:35:53 2001 (3B7DFEB9)
5cd70000 5cd77000 serwvdrv serwvdrv.dll Sat Aug 18 06:35:55 2001 (3B7DFEBB)
5e310000 5e31b000 pngfilt pngfilt.dll Sat Aug 18 06:35:36 2001 (3B7DFEA8)
5ff20000 5ff43000 MSRATING MSRATING.DLL Sat Aug 18 06:37:15 2001 (3B7DFF0B)
5ff50000 5ff61000 msratelc msratelc.dll Sat Aug 18 06:37:14 2001 (3B7DFF0A)
65000000 65009000 ddrawex ddrawex.dll Wed Dec 04 09:22:41 2002 (3DEDC961)
66880000 6688a000 imgutil imgutil.dll Sat Aug 18 06:35:44 2001 (3B7DFEB0)
66e50000 66e8b000 iepeers iepeers.dll Sat Aug 18 06:35:12 2001 (3B7DFE90)
6bdd0000 6be03000 dxtrans dxtrans.dll Sat Aug 18 06:36:04 2001 (3B7DFEC4)
6be10000 6be65000 dxtmsft dxtmsft.dll Sat Aug 18 06:36:03 2001 (3B7DFEC3)
6cc60000 6cc6b000 dispex dispex.dll Sat Aug 18 06:34:58 2001 (3B7DFE82)
71950000 71a34000 comctl32 comctl32.dll Sat Aug 18 06:33:38 2001 (3B7DFE32)
71a50000 71a8b000 mswsock mswsock.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71a90000 71a98000 wshtcpip wshtcpip.dll Sat Aug 18 06:33:39 2001 (3B7DFE33)
71aa0000 71aa8000 WS2HELP WS2HELP.dll Sat Aug 18 06:33:38 2001 (3B7DFE32)
71ab0000 71ac5000 WS2_32 WS2_32.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71ad0000 71ad8000 wsock32 wsock32.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71b20000 71b31000 MPR MPR.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71bf0000 71c01000 SAMLIB SAMLIB.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71c10000 71c1d000 ntlanman ntlanman.dll Sat Aug 18 06:33:40 2001 (3B7DFE34)
71c20000 71c6f000 NETAPI32 NETAPI32.dll Sat Aug 18 06:33:39 2001 (3B7DFE33)
71c80000 71c86000 NETRAP NETRAP.dll Sat Aug 18 06:33:38 2001 (3B7DFE32)
71c90000 71ccc000 NETUI1 NETUI1.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71cd0000 71ce6000 NETUI0 NETUI0.dll Sat Aug 18 06:33:37 2001 (3B7DFE31)
71d40000 71d5b000 actxprxy actxprxy.dll Sat Aug 18 06:33:36 2001 (3B7DFE30)
722b0000 722b5000 sensapi sensapi.dll Sat Aug 18 06:33:34 2001 (3B7DFE2E)
72430000 72442000 browselc browselc.dll Sat Aug 18 06:33:33 2001 (3B7DFE2D)
72b20000 72b38000 plugin plugin.ocx Sat Aug 18 06:33:30 2001 (3B7DFE2A)
72d10000 72d18000 msacm32 msacm32.drv Sat Aug 18 06:33:30 2001 (3B7DFE2A)
72d20000 72d29000 wdmaud wdmaud.drv Sat Aug 18 06:33:30 2001 (3B7DFE2A)
73000000 73023000 WINSPOOL WINSPOOL.DRV Sat Aug 18 06:33:29 2001 (3B7DFE29)
73300000 73375000 vbscript vbscript.dll Sat Aug 18 06:33:28 2001 (3B7DFE28)
73bc0000 73bc6000 DCIMAN32 DCIMAN32.dll Sat Aug 18 06:33:25 2001 (3B7DFE25)
73d50000 73d60000 cryptnet cryptnet.dll Sat Aug 18 06:33:24 2001 (3B7DFE24)
746c0000 746e7000 MSLS31 MSLS31.DLL Sat Aug 18 06:33:22 2001 (3B7DFE22)
74770000 747ff000 mlang mlang.dll Sat Aug 18 06:33:19 2001 (3B7DFE1F)
74810000 74abd000 mshtml mshtml.dll Sat Aug 18 06:33:19 2001 (3B7DFE1F)
74b30000 74b71000 webcheck webcheck.dll Sat Aug 18 06:33:19 2001 (3B7DFE1F)
74cb0000 74d1f000 mshtmled mshtmled.dll Sat Aug 18 06:33:18 2001 (3B7DFE1E)
75970000 75a61000 MSGINA MSGINA.dll Sat Aug 18 06:33:12 2001 (3B7DFE18)
75a70000 75b13000 USERENV USERENV.dll Sat Aug 18 06:33:12 2001 (3B7DFE18)
75c50000 75ce1000 jscript jscript.dll Sat Aug 18 06:33:12 2001 (3B7DFE18)
75e90000 75f31000 SXS SXS.DLL Sat Aug 18 06:33:11 2001 (3B7DFE17)
75f40000 75f5d000 appHelp appHelp.dll Sat Aug 18 06:33:11 2001 (3B7DFE17)
75f60000 75f66000 drprov drprov.dll Sat Aug 18 06:33:11 2001 (3B7DFE17)
75f70000 75f79000 davclnt davclnt.dll Sat Aug 18 06:33:11 2001 (3B7DFE17)
75f80000 7607c000 BROWSEUI BROWSEUI.dll Sat Aug 18 06:33:11 2001 (3B7DFE17)
760f0000 76168000 urlmon urlmon.dll Sat Aug 18 06:33:11 2001 (3B7DFE17)
76170000 761f8000 shdoclc shdoclc.dll Sat Aug 18 06:33:10 2001 (3B7DFE16)
76200000 76297000 WININET WININET.dll Sat Aug 18 06:33:10 2001 (3B7DFE16)
762a0000 762af000 MSASN1 MSASN1.dll Sat Aug 18 06:33:10 2001 (3B7DFE16)
762c0000 7634a000 CRYPT32 CRYPT32.dll Sat Aug 18 06:33:10 2001 (3B7DFE16)
76360000 7636f000 WINSTA WINSTA.dll Sat Aug 18 06:33:10 2001 (3B7DFE16)
76390000 763aa000 IMM32 IMM32.DLL Sat Aug 18 06:33:10 2001 (3B7DFE16)
763b0000 763f5000 comdlg32 comdlg32.dll Sat Aug 18 06:33:10 2001 (3B7DFE16)
76670000 76754000 SETUPAPI SETUPAPI.dll Sat Aug 18 06:33:09 2001 (3B7DFE15)
767f0000 76814000 schannel schannel.dll Sat Aug 18 06:33:08 2001 (3B7DFE14)
76990000 769b4000 ntshrui ntshrui.dll Sat Aug 18 06:33:08 2001 (3B7DFE14)
769c0000 76b09000 SHDOCVW SHDOCVW.dll Sat Aug 18 06:33:07 2001 (3B7DFE13)
76b20000 76b35000 ATL ATL.DLL Sat Aug 18 06:33:07 2001 (3B7DFE13)
76b40000 76b6c000 WINMM WINMM.dll Sat Aug 18 06:33:07 2001 (3B7DFE13)
76c30000 76c5b000 wintrust wintrust.dll Sat Aug 18 06:33:06 2001 (3B7DFE12)
76c90000 76cb2000 IMAGEHLP IMAGEHLP.dll Sat Aug 18 06:33:06 2001 (3B7DFE12)
76e80000 76e8d000 rtutils rtutils.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76e90000 76ea1000 rasman rasman.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76eb0000 76eda000 TAPI32 TAPI32.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76ee0000 76f17000 RASAPI32 RASAPI32.DLL Sat Aug 18 06:33:05 2001 (3B7DFE11)
76f20000 76f45000 DNSAPI DNSAPI.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76f60000 76f8c000 WLDAP32 WLDAP32.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76f90000 76fa0000 Secur32 Secur32.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76fb0000 76fb7000 winrnr winrnr.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76fc0000 76fc5000 rasadhlp rasadhlp.dll Sat Aug 18 06:33:05 2001 (3B7DFE11)
76fd0000 77048000 CLBCATQ CLBCATQ.DLL Sat Aug 18 06:33:04 2001 (3B7DFE10)
77050000 77115000 COMRes COMRes.dll Sat Aug 18 06:33:04 2001 (3B7DFE10)
77120000 771ab000 OLEAUT32 OLEAUT32.dll Sat Aug 18 06:33:04 2001 (3B7DFE10)
771b0000 772ca000 ole32 ole32.dll Sat Aug 18 06:33:04 2001 (3B7DFE10)
772d0000 77333000 SHLWAPI SHLWAPI.dll Sat Aug 18 06:33:04 2001 (3B7DFE10)
77340000 773cb000 comctl32_77340000 comctl32.dll Sat Aug 18 06:33:03 2001 (3B7DFE0F)
773d0000 77bc4000 SHELL32 SHELL32.dll Sat Aug 18 06:33:03 2001 (3B7DFE0F)
77bd0000 77bd7000 midimap midimap.dll Sat Aug 18 06:33:03 2001 (3B7DFE0F)
77be0000 77bf4000 MSACM32_77be0000 MSACM32.dll Sat Aug 18 06:33:03 2001 (3B7DFE0F)
77c00000 77c07000 VERSION VERSION.dll Sat Aug 18 06:33:03 2001 (3B7DFE0F)
77c10000 77c63000 msvcrt msvcrt.dll Sat Aug 18 06:33:02 2001 (3B7DFE0E)
77c70000 77cb0000 GDI32 GDI32.dll Sat Aug 18 06:33:02 2001 (3B7DFE0E)
77cc0000 77d35000 RPCRT4 RPCRT4.dll Sat Aug 18 06:33:02 2001 (3B7DFE0E)
77d40000 77dcd000 USER32 USER32.dll Sat Aug 18 06:33:02 2001 (3B7DFE0E)
77dd0000 77e5b000 ADVAPI32 ADVAPI32.dll Sat Aug 18 06:33:02 2001 (3B7DFE0E)
77e60000 77f45000 kernel32 kernel32.dll Sat Aug 18 06:33:02 2001 (3B7DFE0E)
77f50000 77ff9000 ntdll ntdll.dll Sat Aug 18 04:25:18 2001 (3B7DE01E)
Closing open log file c:\debuglog.txt
----------------------------------------------------------------------------------------------------------------------------------------------------



Also in my very first post in this thread the debug report I included which ended with 'exception analysis' may not have been the full report as I can't remember if I closed the black (dos?) window before it closed itself. Sorry about that - if that is the case.

I went to a computer repair shop in my area today and asked if they had hardware memory analyser and they did not.

 

We need to keep it seperate.. the USER.DMPs are from user mode programs crashing, and probably not related to the memory corruption problem.


To remove that driver, i would boot into safe mode (f8 on startup) and rename the file in \windows\system32\drivers

To get SP2, go to windows update, and do the 'custom' install. Install all the critical updates. Once you are current, SP2 will show up as a download option. Also, you should be able to pick up a CD from local computer shops, or order it from This link

 

Thanks Joe,
Sorry about posting the user.dmp
Just to make it 100% clear in my mind - I go to the drivers folder find the BANTExt.sys file and rename it?

Do I just rename it as anything - for example right click on it, choose rename and then rename it monk2706?

At the moment can't find a local shop which has the hardware memory analyser. I have tried downloading the high priority updates a few times - a lot of the times it says that eithier windows explorer or internet explorer (can't remember which one) needs to close and when I send error it says that updates are missing - this happens before I even try to download. Twice I have got to the actual downloading part and it says it will take 14 minutes to download but then a screen comes up saying 'preparing for installation' but then it seems to just freeze (unless I am not leaving it long enough - but I did leave it longer than 14 minutes and it was only about one sixth completed and seemingly not progressing to my eye).

 

In explorer, navigate into the folder c:\windows\system32\drivers
Within that directory, you will find a file named BANTExt.sys. Rename that file to BANTExt.sys.old or something like that. dont delete it outright, just rename it.

If your machine wont stay stable long enough to download sp2, i recommend ordering the CD or looking around for a free cd from a computer shop

 

Thanks Joe,
I have now downloaded all the high priority updates and will soon download sp2 (it eventually downloaded this time). I notice that it is possible for me to download sp1 - do I need to download sp1 before sp2?

Also I can't find a shop with a memory hardware analyser - is it worth trying another memory testing program that I can download from the web? Although I am 99.9% certain that the computer will restart before the ram test has finished.

Nearly all of my error reports after random restarts now seem to be coming back from microsoft saying 'this error has been caused by a device driver' and not a 'graphics device driver' like it was before.


Also is it worth trying the old 128mb ram (it is not ddr like my current ram) from my old computer, will it fit the slots? as I am unsure whether all ram fits all slots or if you need to use certain ram depending on what components you have.

 

OK - I run memtest for around 15 hours and in this time in picked up 0 errors and the computer didn't restart once. However as soon as I stopped the memtest and started using the internet I had a crash after about 5 minutes. Would this indicate that the ram may not be the problem?

Thanks

 

its not a conslusive test, unfortunatly. But its interesting. did you remove that old driver?

Your old ram will probably not fit. if you arent sure, i dont recommend trying it.

You need to get current on your software, via windowsupdate or by ordering the CD from the link i posted above.

 

I have renamed the old driver but I did it after the memtest it doesn't show up in the debug logs anymore.

What is happening sometimes now is that sometimes the computer will freeze up and nothing will work and I can't move the mouse pointer so I have to press restart on the computer. Or sometimes when I have the message updates are ready to be installed on my desktop I click on it go to custom install and install now. I then leave my computer for a while and when I come back everything is freezed up so I have to press the restart button on the computer itself. When the computer restarts the screen comes up which displays the tempatures and fan speed etc but then I just get a black screen so I have to press restart again. Most of the time this will work but I get the seriopus error message and when I send error report to microsoft I get eithier of the following:

Error caused by Silicon Integrated Systems Corporation: No specific solution found

Problem Description:
An unknown error occurred in the SiS Graphics Driver created by Silicon Integrated Systems Corporation This application/driver is loaded during startup and may cause problems even if you are not currently using SiS Graphics Driver


or

Error caused by graphics device driver


I then notice that the updates I tried to install from my desktop have not been installed.


Also I check the debug logs from minidump after every crash (not that I can understand them, but I cut and paste parts of the log in to google to see what it comes up with)




By far the most common debug log I get is the one with the error message:

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)

but I do get plenty of different error messages as well

such as:

NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.

or

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:

or

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.





I don't know if this helps as I don't now how the logs work but in the log it nearly always says
Probably caused by : ntoskrnl.exe

or sometimes when I have the ntfs.sys error like I have detailed above
Probably caused by : ntfs.sys


Thanks for your continued help Joe - I will attempt to download service pack 2 today.

 

sounds like a mainboard problem

This sounds like the motherboard has a memory manager problem to me. I would look to the motherboard Company for help.

 

This latest dump is showing evidence that your physical memory is bad.
The data in your memory for the file WIN32k.SYS does not match the data read from the hard drive. This is consistant with the varity of other dumps you posted above.

Code:

CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32k
!chkimg -lo 50 -d !win32k
bf819a84 - win32k!EngTransparentBlt+1b5 [ 45:44 ]
1 error : !win32k (bf819a84)

If you boot in safe mode, do you still have these problems? There could be a problem with your graphics card, based on this last dump as well.

Based on the history of this thing, something is not happy with this box, it could be just the RAM sticks, or the motherboard itself. I'm not one to throw in the towel, but we may need to refer you to the tech shop for some component swaps.