Windows XPPost your Windows XP related questions here.
Mission Statement
WindowsBBS is an online community dedicated to easily accessible technical support for those using Microsoft operating systems and other Windows software.
Our goal is to become the leading resource for computer users that require assistance with their day-to-day computer usage, including full support for networking PC's, virus & malware removal, system upgrades and general support questions.
I am hoping someone can help me. I have searched through previous threads but I have been unable to find a solution to my problem.
A few weeks ago my computer all of a sudden restarted itself. When it was back up and running I got a message saying "The system has recovered from a serious error...." I clicked on report error but I received another message saying it was unable to report the error.
Since then it has been doing it more and more often and I'm worried that I won't be able to do a thing with it soon. Further information I got, which means nothing to me but might help, included:
STOP error 0x1000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M is very difficult to tie down .....
Quote:
A kernel mode program generated an exception which the error handler didn’t catch. These are nearly always hardware compatibility issues (which sometimes means a driver issue or a need for a BIOS upgrade).
Have you added any hardware recently or updated drivers?
Set up the computer so that it does not automatically restart on system failure .....
Control Panel > System > Advanced > Startup and Recovery > Settings ....
Under System failure uncheck 'Automatically restart' and under Write debugging information select 'Kernel memory dump' from the dropdown list and OK out.
The computer will now show the BSOD in the event of a System failure giving details of the Stop message and the contents of the memory will be dumped to disk.
Unfortunately these logs require expert knowledge to analyze and there are only a few members (who occasionally visit WindowsBBS.com) that have the depth of knowledge necessary. Other members can make observations and suggestions as to how you might proceed toward finding the cause ....
As a precaution ensure that you have a current backup of your importanrt data - this should always be standard practice.
Just to make sure... I have changed the computer so it won't automatically restart, will I know how to restart it when this happens?
When you say run the dump data.. how do I do this, just cut and paste from my computer? Or will I understand when it happens?
Please bare with me, I am not an expert as you can probably tell. Lastly, when you say make sure I have a back up of my important files, I assume you just mean that I have saved these files to a disk or memory stick or something like that, or is there something I should be doing on the computer?
To restart the computer either press the Power button which should shut it down - you may need to hold this in for a few seconds and then restart in the usual way or hit the Reset button.
Quote:
When you say run the dump data.. how do I do this ....
Run debugwiz.exe which you will have downloaded - you will be presented with the dialogue shown in the screenshots - Browse for the dump file and then hit Generate log.
Quote:
I assume you just mean that I have saved these files to a disk or memory stick or something like that
Yes, they must be on media which is independent of the computer and can be read on any other computer. A backup on the same drive in the computer is useless if the hard drive fails, etc. Burn to CD/DVD or copy to external hard drive or memory stick
Well I figured out how to do it, and to me, this looks really scary. Hopefully it is not too serious...? Is this what you need?
Opened log file 'c:\debuglog.txt'
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Fri Aug 8 13:13:55.546 2008 (GMT+10)
System Uptime: 0 days 0:53:53.113
WARNING: Process directory table base 18F3A000 doesn't match CR3 00039000
WARNING: Process directory table base 18F3A000 doesn't match CR3 00039000
Loading Kernel Symbols
........................................................................... ..........................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
Loading unloaded module list
............
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80042000, 0, 0}
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
Probably caused by : win32k.sys ( win32k!FindQMsg+93 )
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 80042000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffdb00c). Type ".hh dbgerr001" for details
BUGCHECK_STR: 0x7f_8
TSS: 00000028 -- (.tss 0x28)
.tss 0x28
eax=bbfbc4d8 ebx=e1bc40d8 ecx=bbdd0601 edx=00000000 esi=e1a27ae8 edi=bbfbc4d8
eip=bf802799 esp=f10c0d12 ebp=f10d0c78 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k!FindQMsg+0x93:
bf802799 ?? ???
.trap
Resetting default scope
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: brctrcen.exe
LAST_CONTROL_TRANSFER: from bf80266a to bf802799
UNALIGNED_STACK_POINTER: f10c0d12
STACK_TEXT:
f10d0c78 bf80266a e1bc4008 e1bc40d8 00000000 win32k!FindQMsg+0x93
f10d0c9c bf801d90 e1bc4008 f10d0d18 00000000 win32k!xxxReadPostMessage+0x31
f10d0cec bf819fb8 f10d0d18 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x30e
f10d0d4c 804de7ec 004d1b70 00000000 00000000 win32k!NtUserGetMessage+0x27
f10d0d4c 7c90eb94 004d1b70 00000000 00000000 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f348 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: .tss 0x28 ; kb
FOLLOWUP_IP:
win32k!FindQMsg+93
bf802799 ?? ???
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!FindQMsg+93
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 47e0e106
FAILURE_BUCKET_ID: 0x7f_8_win32k!FindQMsg+93
BUCKET_ID: 0x7f_8_win32k!FindQMsg+93
Followup: MachineOwner
---------
eax=ffdff13c ebx=80042000 ecx=00000000 edx=00000000 esi=00000000 edi=00000000
eip=804e06e1 esp=8054d664 ebp=00000000 iopl=0 nv up di ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000086
nt!KiTrap08+0x44:
804e06e1 ebee jmp nt!KiTrap08+0x34 (804e06d1)
ChildEBP RetAddr Args to Child
00000000 bf802799 00000000 00000000 00000000 nt!KiTrap08+0x44 (FPO: TSS 28:0)
f10d0c78 bf80266a e1bc4008 e1bc40d8 00000000 win32k!FindQMsg+0x93 (FPO: [Non-Fpo])
f10d0c9c bf801d90 e1bc4008 f10d0d18 00000000 win32k!xxxReadPostMessage+0x31 (FPO: [Non-Fpo])
f10d0cec bf819fb8 f10d0d18 000025ff 00000000 win32k!xxxRealInternalGetMessage+0x30e (FPO: [Non-Fpo])
f10d0d4c 804de7ec 004d1b70 00000000 00000000 win32k!NtUserGetMessage+0x27 (FPO: [Non-Fpo])
f10d0d4c 7c90eb94 004d1b70 00000000 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f10d0d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f348 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806eb500 nt ntoskrnl.exe Wed Feb 28 20:10:41 2007 (45E54711)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 15:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 16:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Wed Aug 04 17:57:11 2004 (411096D7)
bf800000 bf9c2800 win32k win32k.sys Wed Mar 19 20:46:46 2008 (47E0E106)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 17:56:56 2004 (411096C8)
ef4b3000 ef4dd180 kmixer kmixer.sys Wed Jun 14 18:47:45 2006 (448FCD31)
f0f80000 f0fc0280 HTTP HTTP.sys Fri Mar 17 11:33:09 2006 (441A03C5)
f1129000 f113d520 NAVENG NAVENG.SYS Wed May 07 03:46:44 2008 (48209984)
f113e000 f120d6e0 NAVEX15 NAVEX15.SYS Wed May 07 03:45:51 2008 (4820994F)
f1236000 f127f000 SRTSP SRTSP.SYS Tue Sep 11 07:56:38 2007 (46E5BD96)
f131f000 f1370480 srv srv.sys Mon Aug 14 20:34:39 2006 (44E051BF)
f14d9000 f1504d80 mrxdav mrxdav.sys Tue Dec 18 20:51:33 2007 (47679825)
f1803000 f1817400 wdmaud wdmaud.sys Wed Jun 14 19:00:44 2006 (448FD03C)
f19f8000 f1a1b000 Fastfat Fastfat.SYS Wed Aug 04 16:14:15 2004 (41107EB7)
f1ae3000 f1b21000 SymIDSCo SymIDSCo.sys Fri Feb 08 11:26:34 2008 (47ABA1BA)
f1b21000 f1b42f00 SYMFW SYMFW.SYS Tue Jan 09 13:33:39 2007 (45A2FF03)
f1c13000 f1c21d80 sysaudio sysaudio.sys Wed Aug 04 16:15:54 2004 (41107F1A)
f1cbb000 f1cbe280 ndisuio ndisuio.sys Wed Aug 04 16:03:10 2004 (41107C1E)
f1da3000 f1dab180 SYMIDS SYMIDS.SYS Tue Jan 09 13:34:19 2007 (45A2FF2B)
f39ff000 f3a16480 dump_atapi dump_atapi.sys Wed Aug 04 15:59:41 2004 (41107B4D)
f3a17000 f3a35000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri Jan 18 13:44:27 2008 (4790128B)
f3b1b000 f3b7b000 eeCtrl eeCtrl.sys Fri Jan 18 13:44:27 2008 (4790128B)
f3b7b000 f3be9a00 mrxsmb mrxsmb.sys Fri May 05 19:41:42 2006 (445B1DD6)
f3bea000 f3c14a00 rdbss rdbss.sys Fri May 05 19:47:55 2006 (445B1F4B)
f3cb5000 f3cd5f00 ipnat ipnat.sys Thu Sep 30 08:28:36 2004 (415B3714)
f3cd6000 f3d3f000 SPBBCDrv SPBBCDrv.sys Sat Apr 14 19:31:24 2007 (46209F6C)
f3d3f000 f3d60c80 afd afd.sys Fri Jun 20 20:44:37 2008 (485B8A15)
f3d61000 f3d88c00 netbt netbt.sys Wed Aug 04 16:14:36 2004 (41107ECC)
f3d89000 f3dae000 SYMEVENT SYMEVENT.SYS Tue Sep 25 10:39:57 2007 (46F858DD)
f3dae000 f3ddb100 SYMTDI SYMTDI.SYS Tue Jan 09 13:31:16 2007 (45A2FE74)
f3ddc000 f3e33f80 tcpip tcpip.sys Fri Jun 20 20:45:10 2008 (485B8A36)
f3e34000 f3e46400 ipsec ipsec.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f73ae000 f7406e80 update update.sys Mon Apr 23 20:32:54 2007 (462C8B56)
f740b000 f740d900 Dxapi Dxapi.sys Sat Aug 18 06:53:19 2001 (3B7D843F)
f7f43000 f7f53e00 psched psched.sys Wed Aug 04 16:04:16 2004 (41107C60)
f7f54000 f7f6a680 ndiswan ndiswan.sys Wed Aug 04 16:14:30 2004 (41107EC6)
f80e4000 f80f7900 parport parport.sys Wed Aug 04 15:59:04 2004 (41107B28)
f80f8000 f81fc4e0 AGRSM AGRSM.sys Sat Mar 05 04:02:18 2005 (4228949A)
f81fd000 f821fe80 USBPORT USBPORT.SYS Wed Aug 04 16:08:34 2004 (41107D62)
f8220000 f8243980 portcls portcls.sys Wed Aug 04 16:15:47 2004 (41107F13)
f8244000 f82ee580 ALCXWDM ALCXWDM.SYS Tue Apr 01 20:51:28 2003 (3E896120)
f82ef000 f8311680 ks ks.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f8312000 f8325780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 16:07:04 2004 (41107D08)
f8326000 f84f53c0 nv4_mini nv4_mini.sys Thu Apr 08 12:30:48 2004 (4074B958)
f84fe000 f8501f00 MODEMCSA MODEMCSA.sys Sat Aug 18 06:57:37 2001 (3B7D8541)
f851a000 f851dc80 mssmbios mssmbios.sys Wed Aug 04 16:07:47 2004 (41107D33)
f85ad000 f85c7580 Mup Mup.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f85c8000 f85f4a80 NDIS NDIS.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f85f5000 f8681400 Ntfs Ntfs.sys Fri Feb 09 22:10:31 2007 (45CC56A7)
f8682000 f8694f00 WudfPf WudfPf.sys Fri Sep 29 11:55:43 2006 (451C7D1F)
f8695000 f86ab780 KSecDD KSecDD.sys Wed Aug 04 15:59:45 2004 (41107B51)
f86ac000 f86bdf00 sr sr.sys Wed Aug 04 16:06:22 2004 (41107CDE)
f86be000 f86dd780 fltmgr fltmgr.sys Mon Aug 21 19:14:57 2006 (44E97991)
f86de000 f86f5480 atapi atapi.sys Wed Aug 04 15:59:41 2004 (41107B4D)
f86f6000 f8714880 ftdisk ftdisk.sys Sat Aug 18 06:52:41 2001 (3B7D8419)
f8715000 f8725a80 pci pci.sys Wed Aug 04 16:07:45 2004 (41107D31)
f8726000 f8753d80 ACPI ACPI.sys Wed Aug 04 16:07:35 2004 (41107D27)
f8775000 f877dc00 isapnp isapnp.sys Sat Aug 18 06:58:01 2001 (3B7D8559)
f8785000 f878f500 MountMgr MountMgr.sys Wed Aug 04 15:58:29 2004 (41107B05)
f8795000 f87a1c80 VolSnap VolSnap.sys Wed Aug 04 16:00:14 2004 (41107B6E)
f87a5000 f87ade00 disk disk.sys Wed Aug 04 15:59:53 2004 (41107B59)
f87b5000 f87c1200 CLASSPNP CLASSPNP.SYS Wed Aug 04 16:14:26 2004 (41107EC2)
f87e5000 f87ee480 NDProxy NDProxy.SYS Sat Aug 18 06:55:30 2001 (3B7D84C2)
f87f5000 f8803100 usbhub usbhub.sys Wed Aug 04 16:08:40 2004 (41107D68)
f8815000 f881d700 netbios netbios.sys Wed Aug 04 16:03:19 2004 (41107C27)
f8835000 f883e080 SRTSPX SRTSPX.SYS Tue Sep 11 07:58:41 2007 (46E5BE11)
f8845000 f884d700 wanarp wanarp.sys Wed Aug 04 16:04:57 2004 (41107C89)
f8855000 f8864580 2WirePCP 2WirePCP.sys Tue Sep 24 08:48:08 2002 (3D8F9A28)
f8885000 f888dd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 16:08:18 2004 (41107D52)
f88b5000 f88bd880 Fips Fips.SYS Sat Aug 18 11:31:49 2001 (3B7DC585)
f8915000 f8924900 Cdfs Cdfs.SYS Wed Aug 04 16:14:09 2004 (41107EB1)
f8935000 f893dd00 intelppm intelppm.sys Wed Aug 04 15:59:19 2004 (41107B37)
f8945000 f894f380 imapi imapi.sys Wed Aug 04 16:00:12 2004 (41107B6C)
f8955000 f8961180 cdrom cdrom.sys Wed Aug 04 15:59:52 2004 (41107B58)
f8965000 f8973080 redbook redbook.sys Wed Aug 04 15:59:34 2004 (41107B46)
f8975000 f8983b80 drmk drmk.sys Wed Aug 04 16:07:54 2004 (41107D3A)
f8985000 f8994d80 serial serial.sys Wed Aug 04 16:15:51 2004 (41107F17)
f8995000 f89a1e00 i8042prt i8042prt.sys Wed Aug 04 16:14:36 2004 (41107ECC)
f89a5000 f89b1880 rasl2tp rasl2tp.sys Wed Aug 04 16:14:21 2004 (41107EBD)
f89b5000 f89bf200 raspppoe raspppoe.sys Wed Aug 04 16:05:06 2004 (41107C92)
f89c5000 f89d0d00 raspptp raspptp.sys Wed Aug 04 16:14:26 2004 (41107EC2)
f89d5000 f89dd900 msgpc msgpc.sys Wed Aug 04 16:04:11 2004 (41107C5B)
f89e5000 f89eef00 termdd termdd.sys Wed Aug 04 15:58:52 2004 (41107B1C)
f89f5000 f89fb200 PCIIDEX PCIIDEX.SYS Wed Aug 04 15:59:40 2004 (41107B4C)
f89fd000 f8a01900 PartMgr PartMgr.sys Sat Aug 18 11:32:23 2001 (3B7DC5A7)
f8a05000 f8a0c880 SISAGPX SISAGPX.sys Thu Oct 31 14:58:41 2002 (3DC0AA71)
f8a35000 f8a39500 watchdog watchdog.sys Wed Aug 04 16:07:32 2004 (41107D24)
f8a85000 f8a8a080 SYMREDRV SYMREDRV.SYS Tue Jan 09 13:34:37 2007 (45A2FF3D)
f8a8d000 f8a93e80 SYMNDIS SYMNDIS.SYS Tue Jan 09 13:32:03 2007 (45A2FEA3)
f8add000 f8ae1280 usbohci usbohci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f8ae5000 f8aeb800 usbehci usbehci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f8aed000 f8af4580 Modem Modem.SYS Wed Aug 04 16:08:04 2004 (41107D44)
f8af5000 f8afc000 fdc fdc.sys unavailable (FFFFFFFE)
f8afd000 f8b02500 point32 point32.sys Wed Nov 08 18:02:34 2006 (4551810A)
f8b05000 f8b0aa00 mouclass mouclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
f8b0d000 f8b13000 kbdclass kbdclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
f8b15000 f8b19880 TDI TDI.SYS Wed Aug 04 16:07:47 2004 (41107D33)
f8b1d000 f8b21580 ptilink ptilink.sys Sat Aug 18 06:49:53 2001 (3B7D8371)
f8b25000 f8b29080 raspti raspti.sys Sat Aug 18 06:55:32 2001 (3B7D84C4)
f8b2d000 f8b32000 flpydisk flpydisk.sys Wed Aug 04 15:59:24 2004 (41107B3C)
f8b3d000 f8b43180 HIDPARSE HIDPARSE.SYS Wed Aug 04 16:08:15 2004 (41107D4F)
f8b45000 f8b4a200 vga vga.sys Wed Aug 04 16:07:06 2004 (41107D0A)
f8b4d000 f8b51a80 Msfs Msfs.SYS Wed Aug 04 16:00:37 2004 (41107B85)
f8b55000 f8b5c880 Npfs Npfs.SYS Wed Aug 04 16:00:38 2004 (41107B86)
f8b65000 f8b6cb80 usbccgp usbccgp.sys Wed Aug 04 16:08:45 2004 (41107D6D)
f8b6d000 f8b73500 usbprint usbprint.sys Wed Aug 04 16:01:23 2004 (41107BB3)
f8b75000 f8b7b780 USBSTOR USBSTOR.SYS Wed Aug 04 16:08:44 2004 (41107D6C)
f8b85000 f8b88000 BOOTVID BOOTVID.dll Sat Aug 18 06:49:09 2001 (3B7D8345)
f8c0d000 f8c0f280 rasacd rasacd.sys Sat Aug 18 06:55:39 2001 (3B7D84CB)
f8c21000 f8c23580 hidusb hidusb.sys Sat Aug 18 07:02:16 2001 (3B7D8658)
f8c25000 f8c28b00 usbscan usbscan.sys Wed Aug 04 15:58:44 2004 (41107B14)
f8c29000 f8c2ca00 kbdhid kbdhid.sys Wed Aug 04 15:58:33 2004 (41107B09)
f8c2d000 f8c2ff80 mouhid mouhid.sys Sat Aug 18 06:47:57 2001 (3B7D82FD)
f8c5d000 f8c60c80 serenum serenum.sys Wed Aug 04 15:59:06 2004 (41107B2A)
f8c61000 f8c63980 gameenum gameenum.sys Wed Aug 04 16:08:20 2004 (41107D54)
f8c65000 f8c67580 ndistapi ndistapi.sys Sat Aug 18 06:55:29 2001 (3B7D84C1)
f8c75000 f8c76b80 kdcom kdcom.dll Sat Aug 18 06:49:10 2001 (3B7D8346)
f8c77000 f8c78100 WMILIB WMILIB.SYS Sat Aug 18 07:07:23 2001 (3B7D878B)
f8ca3000 f8ca4100 swenum swenum.sys Wed Aug 04 15:58:41 2004 (41107B11)
f8ca9000 f8caa280 USBD USBD.SYS Sat Aug 18 07:02:58 2001 (3B7D8682)
f8cab000 f8cad000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f8cad000 f8cae080 Beep Beep.SYS Sat Aug 18 06:47:33 2001 (3B7D82E5)
f8caf000 f8cb0080 mnmdd mnmdd.SYS Sat Aug 18 06:57:28 2001 (3B7D8538)
f8cb1000 f8cb2080 RDPCDD RDPCDD.sys Sat Aug 18 06:46:56 2001 (3B7D82C0)
f8cb5000 f8cb6100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 07:07:23 2001 (3B7D878B)
f8cf1000 f8cf2780 SYMDNS SYMDNS.SYS Tue Jan 09 13:31:23 2007 (45A2FE7B)
f8d31000 f8d33000 ParVdm ParVdm.SYS unavailable (FFFFFFFE)
f8d35000 f8d36fa0 MASPINT MASPINT.SYS Wed Mar 29 19:11:19 2000 (38E1BAA7)
f8d3d000 f8d3dd00 pciide pciide.sys Sat Aug 18 06:51:49 2001 (3B7D83E5)
f8e26000 f8e26d00 dxgthk dxgthk.sys Sat Aug 18 06:53:12 2001 (3B7D8438)
f8e35000 f8e35b80 msmpu401 msmpu401.sys Sat Aug 18 06:59:59 2001 (3B7D85CF)
f8e36000 f8e36c00 audstub audstub.sys Sat Aug 18 06:59:40 2001 (3B7D85BC)
f8e4e000 f8e4f000 Null Null.SYS unavailable (FFFFFFFE)
I have held back in responding to your log in the hope that bdesmond would come back with an analysis.
As I said at the outset .....
Quote:
Unfortunately these logs require expert knowledge to analyze and there are only a few members (who occasionally visit WindowsBBS.com) that have the depth of knowledge necessary. Other members can make observations and suggestions as to how you might proceed toward finding the cause ....
I do not have the depth of knowledge to point to the probable cause of the BSOD unless it is fairly obvious. Your log indicates that there are problems, but the cause is not obvious to the untrained eye and I have nothing to suggest
It is possible it is your Brother multi function device.
So before we are off on a tangent lets eliminate that as an issue.
The steps below look complex but they are not when done 1 step at a time.
Do them in the order presented!
At the end you will be requested to boot to safe mode so you should try to print this. If it is the printer then it may blue Screen on you. Have you noticed this issue before or after you have printed?
1. ======================================
ERUNT (Backup the Registry) Registry can be restored with or without System Restore
Add a redundent Reg backup, get and install ERUNT let it add itself to startup and do a backup when offered on install, check all boxes.
2. =======================================
Quick Check for Bad/Prevalent Malware. Download but do not run until directed below!
D/L Xclean_Micro http://www.xblock.com/download/xclean_micro.exe
No install, run it delete all it finds decline to reboot on each item found, until the program finishes then reboot. This program has no log so make a note of all found and post back.
4. =======================================
Cleaners. Download all but do not run until directed below!
D/L install and run ATF-Cleaner clear all except passwords in all browsers you have. Run repeatedly until no more found.
5. =======================================
Once all the above are downloaded Shutdown the computer.
While off unplug all possible external devices especially the Brother Printer.
Do not plug theses back in until directed.
6. =======================================
Boot to Safe Mode
a. Run Xclean
b. Run ATF-Cleaner, Select all for all browsers except passwords! Run repeatedly until no more found.
c. Run CCleaner Run Clean twice until no more found, the Registry repeat until no more found.
Reboot to normal report results back then use for a while to see if you can make it blue screen.
This is enough for this post. I have 2nd post ready after you report back.
It is possible it is your Brother multi function device.
So before we are off on a tangent lets eliminate that as an issue.
The steps below look complex but they are not when done 1 step at a time.
Do them in the order presented!
This is enough for this post. I have 2nd post ready after you report back.
Mike
Hi Mike,
Its taken me a while but I've done what you have suggested. The only thing that came up on the Xclean was WinAntiVirus.
I have also changed my cmos battery.
You mentioned it could be my brother mfc, well this died on me a while ago (and well before I started having trouble) I have since uninstalled it anyway.
Would love more help. The computer is still randomly shutting down but not as often. It has done it tonight though.
Is this what you need?
