BSOD IRQ Conflict

Oky Dokey, we will get that clean install taken care of. try to get back to you tonight - hopefully we can do it before we go to work this evening.

Thanks for your help

Mitch

 

Hi Mitch

Here is how I recommend you do this.

On your or another computer download the following and burn to CD. I say this because his computer cannot be trusted not to contaminate the files as soon as they are downloaded.

Do the XP clean install with the network cable unplugged. Tell install to activate later and to set up Internet later when it asks.

The goal here is to get a clean install, update to SP2 install Virus scanner and protections (below) before we ever connect to the Internet.

Do these scans to see if files, if any, that exist on other partitions on this HD are clean.

Since you will not yet be connected to the Internet scan with what you have no update available yet.

Install any applications like Office needed, but hold off on Internet things like Tool-bars and instant messengers. Do them a step at at time.

Stay away from multiple competing tool-bars like Yahoo and Google.

Chose and stay with only one.

I prefer the Google tool-bar as it has the most features and best pop-up stopper. But for now no Tool-bars.

Do in the following order:

XP SP2 (Unless his XP CD says it is already SP2) http://www.microsoft.com/downloads/...0-73cf11fdcdf8/WindowsXP-KB835935-SP2-ENU.exe
-----------------------------------------------------------

AVG http://free.grisoft.com/softw/70free/setup/avg75free_441a944.exe
-----------------------------------------------------------

Block hundreds of bad sites
MVP Block-list
http://www.mvps.org/winhelp2002/hosts.zip
See this page for instructions.
-----------------------------------------------------------


KHBlocker download and install.
http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/KH-Blocker.shtml
Once installed and scanned while unconnected, and all seems well then connect cable back then connect to the Internet and update via Windows update and all the above that we installed while disconnected.
-----------------------------------------------------------
Hitman is the Shotgun of Malware. Not only does it install all the major Tools but automatically downloads the updates. Additionally it maxs out the settings for a truly deep scan, something most users never do. Installs certain critical Microsoft Security Patches and updates.

Then it runs them all one after the other without user intervention. Just sit back and wait for the report on all programs at the end.

Hitman Pro read below page to see what all it installs.
http://www.hitmanpro.nl/hitmanpro/index.php?option=com_content&task=view&id=3&Itemid=9

Download and install but do not run this program until it can connect to the Internet and update.
And before it connects you need to run the setup and do the following:
1. Enable Surfright optional
2. Settings Live functions Download apps... Enable it.
3. Settings Scanning options Select all
4. AntiSpyware enable/select all
5. Antivirus select all

http://hitmanpro1.dyndns.org/strider2/link.aspx?name=download
I would print this out.

Let me know.

Mike

 

Mike, I didn't read your post until after I had done the clean install. We got that done and AVG Installed but SpyBotS&D tried to run and cakked out at IGetNet[51].

Got another BSOD (4 actually) here are the first and last.

First BSOD:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini022007-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp1.020828-1920
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Tue Feb 20 15:35:46.729 2007 (GMT-6)
System Uptime: 0 days 0:28:51.292
Loading Kernel Symbols
................................................................................................
Loading User Symbols
Loading unloaded module list
..
*** ERROR: Symbol file could not be found. Defaulted to export symbols for win32k.sys -
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf83fa55, f766d9b8, 0}

Probably caused by : win32k.sys ( win32k!EngSetPointerShape+13a4 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf83fa55, The address that the exception occurred at
Arg3: f766d9b8, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
win32k!EngSetPointerShape+13a4
bf83fa55 f6462310 test byte ptr [esi+23h],10h

TRAP_FRAME: f766d9b8 -- (.trap fffffffff766d9b8)
.trap fffffffff766d9b8
ErrCode = 00000000
eax=bc644a40 ebx=00000080 ecx=00000080 edx=00000002 esi=03af5148 edi=0000026c
eip=bf83fa55 esp=f766da2c ebp=f766dae4 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
win32k!EngSetPointerShape+0x13a4:
bf83fa55 f6462310 test byte ptr [esi+23h],10h ds:0023:03af516b=??
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: csrss.exe

LAST_CONTROL_TRANSFER: from bf822929 to bf83fa55

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f766dae4 bf822929 00000022 006dfff4 f766dd44 win32k!EngSetPointerShape+0x13a4
00000000 00000000 00000000 00000000 00000000 win32k!EngAlphaBlend+0x1f69


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!EngSetPointerShape+13a4
bf83fa55 f6462310 test byte ptr [esi+23h],10h

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!EngSetPointerShape+13a4

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3d6de5e5

FAILURE_BUCKET_ID: 0x8E_win32k!EngSetPointerShape+13a4

BUCKET_ID: 0x8E_win32k!EngSetPointerShape+13a4

Followup: MachineOwner
---------

eax=bc644a40 ebx=00000080 ecx=00000080 edx=00000002 esi=03af5148 edi=0000026c
eip=bf83fa55 esp=f766da2c ebp=f766dae4 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
win32k!EngSetPointerShape+0x13a4:
bf83fa55 f6462310 test byte ptr [esi+23h],10h ds:0023:03af516b=??
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
f766dae4 bf822929 00000022 006dfff4 f766dd44 win32k!EngSetPointerShape+0x13a4
00000000 00000000 00000000 00000000 00000000 win32k!EngAlphaBlend+0x1f69
start end module name
804d4000 806c6980 nt ntoskrnl.exe Thu Aug 29 04:03:24 2002 (3D6DE35C)
806c7000 806d9e80 hal halacpi.dll Thu Aug 29 03:05:02 2002 (3D6DD5AE)
bf800000 bf9bac80 win32k win32k.sys Thu Aug 29 04:14:13 2002 (3D6DE5E5)
bff50000 bff52280 framebuf framebuf.dll Thu Aug 29 05:40:42 2002 (3D6DFA2A)
bff80000 bff90d80 dxg dxg.sys Thu Aug 29 05:40:42 2002 (3D6DFA2A)
f654d000 f659da80 srv srv.sys Fri Aug 17 20:32:06 2001 (3B7DC596)
f66b6000 f66e0280 mrxdav mrxdav.sys Fri Aug 17 15:50:20 2001 (3B7D838C)
f6809000 f6817900 Cdfs Cdfs.SYS Thu Aug 29 03:58:50 2002 (3D6DE24A)
f69b1000 f69d1380 afd afd.sys Thu Aug 29 04:01:13 2002 (3D6DE2D9)
f6a2e000 f6a31000 ndisuio ndisuio.sys Thu Aug 29 03:35:40 2002 (3D6DDCDC)
f6d12000 f6d27380 dump_atapi dump_atapi.sys Thu Aug 29 03:27:48 2002 (3D6DDB04)
f6d28000 f6d4b700 Fastfat Fastfat.SYS Thu Aug 29 04:12:45 2002 (3D6DE58D)
f6d4c000 f6e13620 avg7core avg7core.sys Mon Oct 23 13:52:56 2006 (453D0F88)
f6e14000 f6e77800 mrxsmb mrxsmb.sys Thu Aug 29 03:59:51 2002 (3D6DE287)
f6ea0000 f6ec7e00 rdbss rdbss.sys Thu Aug 29 03:58:48 2002 (3D6DE248)
f6ec8000 f6eee580 netbt netbt.sys Thu Aug 29 04:01:56 2002 (3D6DE304)
f6eef000 f6f40480 tcpip tcpip.sys Thu Aug 29 03:58:10 2002 (3D6DE222)
f6f61000 f6f72500 VIDEOPRT VIDEOPRT.SYS Thu Aug 29 03:32:03 2002 (3D6DDC03)
f6f7f000 f6f81900 Dxapi Dxapi.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
f6f87000 f6f8b000 watchdog watchdog.sys Thu Aug 29 03:32:20 2002 (3D6DDC14)
f706e000 f708f780 update update.sys Fri Aug 17 22:53:56 2001 (3B7DE6D4)
f7090000 f70a0200 psched psched.sys Thu Aug 29 03:35:54 2002 (3D6DDCEA)
f70a1000 f70b6600 ndiswan ndiswan.sys Thu Aug 29 03:58:38 2002 (3D6DE23E)
f70b7000 f70c9900 parport parport.sys Thu Aug 29 03:27:29 2002 (3D6DDAF1)
f70ca000 f70ea280 ks ks.sys Thu Aug 29 04:13:40 2002 (3D6DE5C4)
f70eb000 f710c180 USBPORT USBPORT.SYS Thu Aug 29 03:32:49 2002 (3D6DDC31)
f7124000 f71e5be0 USR1806 USR1806.SYS Tue Jul 10 18:52:12 2001 (3B4B952C)
f73ea000 f7403680 Mup Mup.sys Thu Aug 29 04:12:53 2002 (3D6DE595)
f7404000 f742ce80 NDIS NDIS.sys Thu Aug 29 04:09:23 2002 (3D6DE4C3)
f742d000 f74b6300 Ntfs Ntfs.sys Thu Aug 29 04:13:37 2002 (3D6DE5C1)
f74b7000 f74ca780 KSecDD KSecDD.sys Fri Aug 17 15:50:01 2001 (3B7D8379)
f74cb000 f74dbe80 sr sr.sys Thu Aug 29 03:17:56 2002 (3D6DD8B4)
f74dc000 f74f1380 atapi atapi.sys Thu Aug 29 03:27:48 2002 (3D6DDB04)
f74f2000 f7510880 ftdisk ftdisk.sys Fri Aug 17 15:52:41 2001 (3B7D8419)
f7511000 f753cc80 ACPI ACPI.sys Thu Aug 29 03:09:03 2002 (3D6DD69F)
f755e000 f756d600 pci pci.sys Thu Aug 29 03:09:10 2002 (3D6DD6A6)
f756e000 f7576c00 isapnp isapnp.sys Fri Aug 17 15:58:01 2001 (3B7D8559)
f757e000 f7587280 MountMgr MountMgr.sys Fri Aug 17 15:47:36 2001 (3B7D82E8)
f758e000 f759a000 VolSnap VolSnap.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
f759e000 f75a6400 disk disk.sys Thu Aug 29 03:27:56 2002 (3D6DDB0C)
f75ae000 f75b9500 CLASSPNP CLASSPNP.SYS Thu Aug 29 04:08:42 2002 (3D6DE49A)
f767e000 f7689980 cdrom cdrom.sys Thu Aug 29 03:27:55 2002 (3D6DDB0B)
f768e000 f769bd00 redbook redbook.sys Thu Aug 29 03:27:45 2002 (3D6DDB01)
f769e000 f76a7b80 imapi imapi.sys Thu Aug 29 03:28:05 2002 (3D6DDB15)
f76ae000 f76bd400 serial serial.sys Thu Aug 29 04:08:27 2002 (3D6DE48B)
f76be000 f76ca780 i8042prt i8042prt.sys Thu Aug 29 04:06:37 2002 (3D6DE41D)
f76ce000 f76d9d00 rasl2tp rasl2tp.sys Thu Aug 29 04:06:36 2002 (3D6DE41C)
f76de000 f76e7800 raspppoe raspppoe.sys Fri Aug 17 15:55:33 2001 (3B7D84C5)
f76ee000 f76f9500 raspptp raspptp.sys Thu Aug 29 04:12:46 2002 (3D6DE58E)
f76fe000 f7706400 msgpc msgpc.sys Fri Aug 17 15:54:19 2001 (3B7D847B)
f771e000 f7727400 termdd termdd.sys Thu Aug 29 03:40:32 2002 (3D6DDE00)
f774e000 f7757480 NDProxy NDProxy.SYS Fri Aug 17 15:55:30 2001 (3B7D84C2)
f775e000 f776ab00 usbhub usbhub.sys Thu Aug 29 03:32:49 2002 (3D6DDC31)
f777e000 f778c280 ipsec ipsec.sys Thu Aug 29 04:07:19 2002 (3D6DE447)
f778e000 f7796180 netbios netbios.sys Thu Aug 29 03:35:45 2002 (3D6DDCE1)
f779e000 f77a6880 Fips Fips.SYS Fri Aug 17 20:31:49 2001 (3B7DC585)
f77ae000 f77b6200 wanarp wanarp.sys Fri Aug 17 15:55:23 2001 (3B7D84BB)
f77de000 f77e3c80 PCIIDEX PCIIDEX.SYS Thu Aug 29 03:27:47 2002 (3D6DDB03)
f77e6000 f77ea900 PartMgr PartMgr.sys Fri Aug 17 20:32:23 2001 (3B7DC5A7)
f7816000 f781df00 amdk7 amdk7.sys Thu Aug 29 03:05:05 2002 (3D6DD5B1)
f781e000 f7825080 Modem Modem.SYS Fri Aug 17 15:57:35 2001 (3B7D853F)
f7826000 f782ab80 usbuhci usbuhci.sys Thu Aug 29 03:32:48 2002 (3D6DDC30)
f782e000 f7832b80 usbehci usbehci.sys Thu Aug 29 03:32:47 2002 (3D6DDC2F)
f7836000 f783ca00 fetnd5 fetnd5.sys Fri Jul 20 06:40:24 2001 (3B5818A8)
f783e000 f783f000 fdc fdc.sys unavailable (00000000)
f7846000 f784b600 mouclass mouclass.sys Thu Aug 29 03:27:00 2002 (3D6DDAD4)
f784e000 f7853b80 kbdclass kbdclass.sys Thu Aug 29 03:26:59 2002 (3D6DDAD3)
f7856000 f785a580 ptilink ptilink.sys Fri Aug 17 15:49:53 2001 (3B7D8371)
f785e000 f7862080 raspti raspti.sys Fri Aug 17 15:55:32 2001 (3B7D84C4)
f7866000 f786ad00 flpydisk flpydisk.sys Thu Aug 29 03:27:43 2002 (3D6DDAFF)
f7876000 f787ad00 vga vga.sys Thu Aug 29 03:32:03 2002 (3D6DDC03)
f787e000 f7882680 Msfs Msfs.SYS Fri Aug 17 15:50:02 2001 (3B7D837A)
f7886000 f788d380 Npfs Npfs.SYS Fri Aug 17 15:50:03 2001 (3B7D837B)
f7896000 f789cf00 avg7rsxp avg7rsxp.sys Mon Jun 19 03:21:28 2006 (44965E88)
f796e000 f7971000 BOOTVID BOOTVID.dll Fri Aug 17 15:49:09 2001 (3B7D8345)
f7a06000 f7a09a80 serenum serenum.sys Fri Aug 17 15:50:13 2001 (3B7D8385)
f7a0a000 f7a0c680 gameenum gameenum.sys Thu Aug 29 03:32:42 2002 (3D6DDC2A)
f7a0e000 f7a10580 ndistapi ndistapi.sys Fri Aug 17 15:55:29 2001 (3B7D84C1)
f7a12000 f7a15f80 TDI TDI.SYS Fri Aug 17 15:57:25 2001 (3B7D8535)
f7a4a000 f7a4c280 rasacd rasacd.sys Fri Aug 17 15:55:39 2001 (3B7D84CB)
f7a5e000 f7a5fb80 kdcom kdcom.dll Fri Aug 17 15:49:10 2001 (3B7D8346)
f7a60000 f7a61100 WMILIB WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f7a62000 f7a63300 viaide viaide.sys Thu Aug 29 03:27:48 2002 (3D6DDB04)
f7a7a000 f7a7b280 USBD USBD.SYS Fri Aug 17 16:02:58 2001 (3B7D8682)
f7a7c000 f7a7df00 Fs_Rec Fs_Rec.SYS Fri Aug 17 15:49:37 2001 (3B7D8361)
f7a7e000 f7a7f080 Beep Beep.SYS Fri Aug 17 15:47:33 2001 (3B7D82E5)
f7a80000 f7a81080 mnmdd mnmdd.SYS Fri Aug 17 15:57:28 2001 (3B7D8538)
f7a82000 f7a83080 RDPCDD RDPCDD.sys Fri Aug 17 15:46:56 2001 (3B7D82C0)
f7a84000 f7a85080 avg7rsw avg7rsw.sys Tue Jul 26 07:10:51 2005 (42E6284B)
f7aa8000 f7aa9100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f7af0000 f7af1a80 ParVdm ParVdm.SYS Fri Aug 17 15:49:49 2001 (3B7D836D)
f7af4000 f7af5360 avgtdi avgtdi.sys Thu Aug 25 04:59:58 2005 (430D969E)
f7bc7000 f7bc7d00 dxgthk dxgthk.sys Fri Aug 17 15:53:12 2001 (3B7D8438)
f7beb000 f7bebc00 audstub audstub.sys Fri Aug 17 15:59:40 2001 (3B7D85BC)
f7c01000 f7c01f00 swenum swenum.sys Fri Aug 17 15:48:47 2001 (3B7D832F)
f7c62000 f7c62b80 Null Null.SYS Fri Aug 17 15:47:39 2001 (3B7D82EB)
f7c63000 f7c63f80 avgclean avgclean.sys Mon Aug 21 17:55:15 2006 (44EA39D3)

Unloaded modules:
f786e000 f7873000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a46000 f7a49000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt



Last Dump:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini022007-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp2.050301-1526
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054c850
Debug session time: Tue Feb 20 17:18:10.315 2007 (GMT-6)
System Uptime: 0 days 0:37:36.878
Loading Kernel Symbols
......................................................................................................
Loading User Symbols
Loading unloaded module list
..
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {18, 2, 1, 804fea9b}

Probably caused by : memory_corruption ( nt!MiRestoreTransitionPte+a0 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000018, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804fea9b, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 00000018

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiRestoreTransitionPte+a0
804fea9b ff4910 dec dword ptr [ecx+10h]

CUSTOMER_CRASH_COUNT: 4

DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: cdb.exe

TRAP_FRAME: f5facc38 -- (.trap fffffffff5facc38)
.trap fffffffff5facc38
ErrCode = 00000002
eax=00000078 ebx=00000000 ecx=00000008 edx=00000ffc esi=80debd90 edi=e112c008
eip=804fea9b esp=f5faccac ebp=03ffffff iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!MiRestoreTransitionPte+0xa0:
804fea9b ff4910 dec dword ptr [ecx+10h] ds:0023:00000018=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 804ddb88 to 8052b591

STACK_TEXT:
f5facc1c 804ddb88 0000000a 00000018 00000002 nt!KeBugCheckEx+0x19
f5facc1c 804fea9b 0000000a 00000018 00000002 nt!KiTrap0E+0x219
f5faccbc 804fe9ef 00000400 ffffffff 83d2b8f8 nt!MiRestoreTransitionPte+0xa0
f5faccd4 804e2f9b 80ddf910 804eea9d c0300020 nt!MiRemovePageFromList+0xa7
f5faccdc 804eea9d c0300020 c0008ed0 83d2b8f8 nt!MiRemoveAnyPage+0x56
f5facd14 804ee2f4 023b4088 00000001 ffffffff nt!MiCopyOnWrite+0xec
f5facd4c 804dda27 00000001 023b4088 00000001 nt!MmAccessFault+0x7a4
f5facd4c 02273c34 00000001 023b4088 00000001 nt!KiTrap0E+0xb8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006d088 00000000 00000000 00000000 00000000 0x2273c34


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiRestoreTransitionPte+a0
804fea9b ff4910 dec dword ptr [ecx+10h]

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!MiRestoreTransitionPte+a0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 422517e4

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_W_nt!MiRestoreTransitionPte+a0

BUCKET_ID: 0xA_W_nt!MiRestoreTransitionPte+a0

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=804fea9b edi=00000018
eip=8052b591 esp=f5facc04 ebp=f5facc1c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
8052b591 5d pop ebp
ChildEBP RetAddr Args to Child
f5facc1c 804ddb88 0000000a 00000018 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f5facc1c 804fea9b 0000000a 00000018 00000002 nt!KiTrap0E+0x219 (FPO: [0,0] TrapFrame @ f5facc38)
f5faccbc 804fe9ef 00000400 ffffffff 83d2b8f8 nt!MiRestoreTransitionPte+0xa0 (FPO: [Uses EBP] [0,1,4])
f5faccd4 804e2f9b 80ddf910 804eea9d c0300020 nt!MiRemovePageFromList+0xa7 (FPO: [Non-Fpo])
f5faccdc 804eea9d c0300020 c0008ed0 83d2b8f8 nt!MiRemoveAnyPage+0x56 (FPO: [0,0,1])
f5facd14 804ee2f4 023b4088 00000001 ffffffff nt!MiCopyOnWrite+0xec (FPO: [Non-Fpo])
f5facd4c 804dda27 00000001 023b4088 00000001 nt!MmAccessFault+0x7a4 (FPO: [Non-Fpo])
f5facd4c 02273c34 00000001 023b4088 00000001 nt!KiTrap0E+0xb8 (FPO: [0,0] TrapFrame @ f5facd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006d088 00000000 00000000 00000000 00000000 0x2273c34
start end module name
804d4000 806c6400 nt ntoskrnl.exe Tue Mar 01 19:33:24 2005 (422517E4)
806c7000 806d9e80 hal halacpi.dll Thu Aug 29 03:05:02 2002 (3D6DD5AE)
bf800000 bf9b7580 win32k win32k.sys Mon Oct 03 20:38:07 2005 (4341DCFF)
bff50000 bff52280 framebuf framebuf.dll Thu Aug 29 05:40:42 2002 (3D6DFA2A)
bff80000 bff90d80 dxg dxg.sys Thu Aug 29 05:40:42 2002 (3D6DFA2A)
f62bd000 f630b800 srv srv.sys Mon Aug 14 03:59:18 2006 (44E03B66)
f64c4000 f64ee500 mrxdav mrxdav.sys Mon Apr 25 20:58:01 2005 (426DA029)
f67e7000 f6807380 afd afd.sys Thu Aug 29 04:01:13 2002 (3D6DE2D9)
f6828000 f682a120 wg6n wg6n.sys Wed Oct 13 18:56:34 2004 (416DC0B2)
f682c000 f682e120 wg5n wg5n.sys Wed Oct 13 18:56:33 2004 (416DC0B1)
f6830000 f6832120 wg4n wg4n.sys Wed Oct 13 18:56:32 2004 (416DC0B0)
f6834000 f6836120 wg3n wg3n.sys Wed Oct 13 18:56:30 2004 (416DC0AE)
f6880000 f6883000 ndisuio ndisuio.sys Thu Aug 29 03:35:40 2002 (3D6DDCDC)
f6b70000 f6b85380 dump_atapi dump_atapi.sys Thu Aug 29 03:27:48 2002 (3D6DDB04)
f6b86000 f6ba9700 Fastfat Fastfat.SYS Thu Aug 29 04:12:45 2002 (3D6DE58D)
f6bdd000 f6caa100 avg7core avg7core.sys Mon Dec 18 13:35:45 2006 (4586ED91)
f6cc2000 f6d2bc00 mrxsmb mrxsmb.sys Fri May 05 04:31:01 2006 (445B1B55)
f6d54000 f6d7cb00 rdbss rdbss.sys Fri May 05 04:40:30 2006 (445B1D8E)
f6d7d000 f6da3580 netbt netbt.sys Thu Aug 29 04:01:56 2002 (3D6DE304)
f6da4000 f6df7200 tcpip tcpip.sys Thu Apr 20 06:38:42 2006 (444772C2)
f6df8000 f6e0a280 ipsec ipsec.sys Sat May 13 05:13:30 2006 (4465B14A)
f6e2b000 f6e3c500 VIDEOPRT VIDEOPRT.SYS Thu Aug 29 03:32:03 2002 (3D6DDC03)
f6efd000 f6f01000 watchdog watchdog.sys Thu Aug 29 03:32:20 2002 (3D6DDC14)
f6f01000 f6f03900 Dxapi Dxapi.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
f6f05000 f6f26780 update update.sys Fri Aug 17 22:53:56 2001 (3B7DE6D4)
f719d000 f71ad200 psched psched.sys Thu Aug 29 03:35:54 2002 (3D6DDCEA)
f71ae000 f71c3600 ndiswan ndiswan.sys Thu Aug 29 03:58:38 2002 (3D6DE23E)
f71c4000 f71d6900 parport parport.sys Thu Aug 29 03:27:29 2002 (3D6DDAF1)
f71d7000 f71f7280 ks ks.sys Thu Aug 29 04:13:40 2002 (3D6DE5C4)
f71f8000 f7219180 USBPORT USBPORT.SYS Thu Aug 29 03:32:49 2002 (3D6DDC31)
f721a000 f72dbbe0 USR1806 USR1806.SYS Tue Jul 10 18:52:12 2001 (3B4B952C)
f73cd000 f73e6680 Mup Mup.sys Thu Aug 29 04:12:53 2002 (3D6DE595)
f73e7000 f7404000 Teefer Teefer.sys Fri Oct 15 20:17:00 2004 (4170768C)
f7404000 f742ce80 NDIS NDIS.sys Thu Aug 29 04:09:23 2002 (3D6DE4C3)
f742d000 f74b6300 Ntfs Ntfs.sys Thu Aug 29 04:13:37 2002 (3D6DE5C1)
f74b7000 f74ca780 KSecDD KSecDD.sys Fri Aug 17 15:50:01 2001 (3B7D8379)
f74cb000 f74dbe80 sr sr.sys Thu Aug 29 03:17:56 2002 (3D6DD8B4)
f74dc000 f74f1380 atapi atapi.sys Thu Aug 29 03:27:48 2002 (3D6DDB04)
f74f2000 f7510880 ftdisk ftdisk.sys Fri Aug 17 15:52:41 2001 (3B7D8419)
f7511000 f753cc80 ACPI ACPI.sys Thu Aug 29 03:09:03 2002 (3D6DD69F)
f755e000 f756d600 pci pci.sys Thu Aug 29 03:09:10 2002 (3D6DD6A6)
f756e000 f7576c00 isapnp isapnp.sys Fri Aug 17 15:58:01 2001 (3B7D8559)
f757e000 f7587280 MountMgr MountMgr.sys Fri Aug 17 15:47:36 2001 (3B7D82E8)
f758e000 f759a000 VolSnap VolSnap.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
f759e000 f75a6400 disk disk.sys Thu Aug 29 03:27:56 2002 (3D6DDB0C)
f75ae000 f75b9500 CLASSPNP CLASSPNP.SYS Thu Aug 29 04:08:42 2002 (3D6DE49A)
f75de000 f75e6880 Fips Fips.SYS Fri Aug 17 20:31:49 2001 (3B7DC585)
f75ee000 f75f6200 wanarp wanarp.sys Fri Aug 17 15:55:23 2001 (3B7D84BB)
f761e000 f7626180 netbios netbios.sys Thu Aug 29 03:35:45 2002 (3D6DDCE1)
f765e000 f766c900 Cdfs Cdfs.SYS Thu Aug 29 03:58:50 2002 (3D6DE24A)
f76ae000 f76b9980 cdrom cdrom.sys Thu Aug 29 03:27:55 2002 (3D6DDB0B)
f76be000 f76cbd00 redbook redbook.sys Thu Aug 29 03:27:45 2002 (3D6DDB01)
f76ce000 f76d7b80 imapi imapi.sys Thu Aug 29 03:28:05 2002 (3D6DDB15)
f76de000 f76ed400 serial serial.sys Thu Aug 29 04:08:27 2002 (3D6DE48B)
f76ee000 f76fa780 i8042prt i8042prt.sys Thu Aug 29 04:06:37 2002 (3D6DE41D)
f76fe000 f7709d00 rasl2tp rasl2tp.sys Thu Aug 29 04:06:36 2002 (3D6DE41C)
f770e000 f7717800 raspppoe raspppoe.sys Fri Aug 17 15:55:33 2001 (3B7D84C5)
f771e000 f7729500 raspptp raspptp.sys Thu Aug 29 04:12:46 2002 (3D6DE58E)
f772e000 f7736400 msgpc msgpc.sys Fri Aug 17 15:54:19 2001 (3B7D847B)
f775e000 f7767400 termdd termdd.sys Thu Aug 29 03:40:32 2002 (3D6DDE00)
f778e000 f7797480 NDProxy NDProxy.SYS Fri Aug 17 15:55:30 2001 (3B7D84C2)
f779e000 f77aab00 usbhub usbhub.sys Thu Aug 29 03:32:49 2002 (3D6DDC31)
f77ce000 f77d7000 wpsdrvnt wpsdrvnt.sys Fri Oct 15 20:18:45 2004 (417076F5)
f77de000 f77e3c80 PCIIDEX PCIIDEX.SYS Thu Aug 29 03:27:47 2002 (3D6DDB03)
f77e6000 f77ea900 PartMgr PartMgr.sys Fri Aug 17 20:32:23 2001 (3B7DC5A7)
f781e000 f7825f00 amdk7 amdk7.sys Thu Aug 29 03:05:05 2002 (3D6DD5B1)
f7826000 f782d080 Modem Modem.SYS Fri Aug 17 15:57:35 2001 (3B7D853F)
f782e000 f7832b80 usbuhci usbuhci.sys Thu Aug 29 03:32:48 2002 (3D6DDC30)
f7836000 f783ab80 usbehci usbehci.sys Thu Aug 29 03:32:47 2002 (3D6DDC2F)
f783e000 f7844a00 fetnd5 fetnd5.sys Fri Jul 20 06:40:24 2001 (3B5818A8)
f7846000 f7847000 fdc fdc.sys unavailable (00000000)
f784e000 f7853600 mouclass mouclass.sys Thu Aug 29 03:27:00 2002 (3D6DDAD4)
f7856000 f785bb80 kbdclass kbdclass.sys Thu Aug 29 03:26:59 2002 (3D6DDAD3)
f785e000 f7862580 ptilink ptilink.sys Fri Aug 17 15:49:53 2001 (3B7D8371)
f7866000 f786a080 raspti raspti.sys Fri Aug 17 15:55:32 2001 (3B7D84C4)
f786e000 f7872d00 flpydisk flpydisk.sys Thu Aug 29 03:27:43 2002 (3D6DDAFF)
f787e000 f7882d00 vga vga.sys Thu Aug 29 03:32:03 2002 (3D6DDC03)
f7886000 f788a680 Msfs Msfs.SYS Fri Aug 17 15:50:02 2001 (3B7D837A)
f788e000 f7895380 Npfs Npfs.SYS Fri Aug 17 15:50:03 2001 (3B7D837B)
f789e000 f78a4c80 avg7rsxp avg7rsxp.sys Tue Dec 12 09:49:04 2006 (457ECF70)
f796e000 f7971000 BOOTVID BOOTVID.dll Fri Aug 17 15:49:09 2001 (3B7D8345)
f7a16000 f7a19a80 serenum serenum.sys Fri Aug 17 15:50:13 2001 (3B7D8385)
f7a1a000 f7a1c680 gameenum gameenum.sys Thu Aug 29 03:32:42 2002 (3D6DDC2A)
f7a1e000 f7a20580 ndistapi ndistapi.sys Fri Aug 17 15:55:29 2001 (3B7D84C1)
f7a22000 f7a25f80 TDI TDI.SYS Fri Aug 17 15:57:25 2001 (3B7D8535)
f7a56000 f7a58280 rasacd rasacd.sys Fri Aug 17 15:55:39 2001 (3B7D84CB)
f7a5e000 f7a5fb80 kdcom kdcom.dll Fri Aug 17 15:49:10 2001 (3B7D8346)
f7a60000 f7a61100 WMILIB WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f7a62000 f7a63300 viaide viaide.sys Thu Aug 29 03:27:48 2002 (3D6DDB04)
f7a74000 f7a75280 USBD USBD.SYS Fri Aug 17 16:02:58 2001 (3B7D8682)
f7a76000 f7a77f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 15:49:37 2001 (3B7D8361)
f7a78000 f7a79080 Beep Beep.SYS Fri Aug 17 15:47:33 2001 (3B7D82E5)
f7a7a000 f7a7b080 mnmdd mnmdd.SYS Fri Aug 17 15:57:28 2001 (3B7D8538)
f7a7c000 f7a7d080 RDPCDD RDPCDD.sys Fri Aug 17 15:46:56 2001 (3B7D82C0)
f7a80000 f7a81080 avg7rsw avg7rsw.sys Tue Jul 26 07:10:51 2005 (42E6284B)
f7a92000 f7a93100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f7ada000 f7adba80 ParVdm ParVdm.SYS Fri Aug 17 15:49:49 2001 (3B7D836D)
f7ade000 f7adf360 avgtdi avgtdi.sys Thu Aug 25 04:59:58 2005 (430D969E)
f7b5a000 f7b5ad00 dxgthk dxgthk.sys Fri Aug 17 15:53:12 2001 (3B7D8438)
f7b70000 f7b70c00 audstub audstub.sys Fri Aug 17 15:59:40 2001 (3B7D85BC)
f7b7a000 f7b7af00 swenum swenum.sys Fri Aug 17 15:48:47 2001 (3B7D832F)
f7b9d000 f7b9db80 Null Null.SYS Fri Aug 17 15:47:39 2001 (3B7D82EB)
f7b9e000 f7b9ef80 avgclean avgclean.sys Mon Aug 21 17:55:15 2006 (44EA39D3)

Unloaded modules:
f7876000 f787b000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a52000 f7a55000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


Been here several hours -- gotta go so Jim can go to work. Did download Spywareblaster and have it on his system as well as Sygate. He should be safe for now but when he gets back from a minivacation (two days off) I will get back here and take care of those other files.

Thanks so much for your help.......there is no way I could have done this alone.

Mitch

 

Ahhh Mitch

Fraid fixing those incidents will not do it.

It should not be doing this now.

It is time to check the hardware.

We need to run some memory tests.

The case should be opened and blown out with air spray.

If there are more than 1 stick of memory they should be removed and reversed. Possibly by reseating we may get some relief.

Power it up with the case off and see if all fans are working especially the one over the CPU.

Think back. Does this machine run until it gets hot, then after about 8-10 minutes this begins? Get worse the longer it is on?

go here read do mailmans post #5:

http://windowsbbs.com/showthread.php?t=62175&highlight=test+ram

Get back.

Mike

 

Mike,

I just talked to Jim, he said the computer is on 24/7. He also said the system can just be sitting idle and restart. But it does it a lot when he tries to use it. He will blow the dust out when he gets off work, switch the memory, and check the fans and let me know. He is going out of town on his days off so will not be back until Friday. I will get over there on Friday or Saturday to get him started on the memory test if it is still doing it.

Mitch

 

Well Mitch a cpu running on the border line of hot will do this.

Make sure all fans are operating.

Additionally a High Performance video card will cause this in 2 ways. If this is an on the motherboard video this will not be the issue. But if it is an addon and has its own fan it could.

1. By throwing out additional heat especially when being fully utilized as in a game or high graphic program.

2. By taxing the Powersupply. Theses Video cards pull more voltage and of course put out more heat. May need a more powerful power supply.

Go into Bios and look at CPU temps and shutoff temp settings.

The power supply will have to be checked by a tech for proper voltage.

But I have been able to pinpoint heat related problems by directing a small high output fan into the open case .

Don't assume leaving the case off will cause it to run cooler. A well designed case actually routes the airflow over the CPU and can be cooler than having the case off. But an external fan as mentioned will correct this and cool it even more.

Run the external fan and if the problem goes away then it is a heat related problem and you will need a more powerful CPU cooler fan and perhaps additional case fans.

Wish I had better news.

Mike

Mitch I will stick with you thru this issue and your own other issue. I am not taking on any other posts. But after your 2 posts and one other I will no longer be a member of this BBS.

 

Mike,

Jim blew out all the dust. He said it was horrible. He took the fan off the CPU and he said the heat sink was caked with gunk and was very hot - hot enough he couldn't touch it for long before having to back away. He also switched the memory sticks.

Was able to play over seven games of solitare without a crash. but he said it booted very slowly.

He will give me another progress report Monday late morning and I am planning on going over Monday afternoon. We are going to run the memory test.

Will update as soon as I get more info.

Mitch

 

Good Mitch we may have it.

Make sure to look at the fans running with case off to ascertain they are all working.

Might want to see if there is a place to add another case fan. Might also consider a new Hi Perf CPU fan.

Go into services and turn off DNS Client to see if that improves the boot time.

Keep me posted ASAP remember I am tryinng to close all posts so I can go. I just like to finish what I started.

Mike

 

will do.

Mitch

 

Mike,

I am at Jim's now and his system is booting real slow. It gets to the desktop just fine but is taking forever to load the firewall. when we reinstalled XP he lost the audio driver and I think the system is trying to find it????? I am going to install an audio driver and see what happens. Already disabled DNS Client.

Mitch

 

Ok, I think we are almost there. I got the audio and proper video drivers installed. As I said his system has not crashed in almost a week now. Amazing what dirt can do.

The system is still booting at the desktop real slow. Desktop loads ok, Avg loads next normally, then it takes a long time for the firewall and his yahoo messenger to load.

Looking at the system info, it only sees 448MB RAM - he has 512MB installed in two sticks. I will have to get back to his house to run MEMTEST. I posted a new thread about creating a bootable CD (i know I should have posted it here but wasn't thinking - I was in a hurry and saw that MFlynn was "away" and didn't know if anyone else would see this soon enough)

He has almost nothing running on startup [AVG, Yahoo Messenger, and Sygate Firewall] so can't figure out what is causing it to run so slowly at the desktop on boot. Once everything loads - it runs fine.

I checked the system and application logs and nothing is in error.

System is an AMD 3ghz w/512MB RAM and a 60gig hard drive. On Board audio and video (VIA) nothing installed in the slots.

What could be slowing it down???

Mitch

 

No new info yet

Please don't close this out yet. Storms of life have caused a delay in getting my friends computer.

He has had not BSODs since the system was cleaned out. His only problem is that it boots real slow once it gets to the desktop.

He said he checked his "system info" and it only returned that he as 448MB RAM when he actually has 512MB.

Haven't done the MEMTEST yet; will try to this week.

Mitch