Help! Blue Screen Of Death for weeks now, no solution yet! + crash dump

Hi,

Since a couple of weeks my Windows XP machine is acting strange.
I get sudden BSODs with different Stop messages (0x0000008e and 0x0000007f)
I have downloaded the Debugging Tools for Windows from MS, but don't really know how to use it effectively to get to the source of the problem.
I tested my memory with a bootable cd, but didn't find anything.
Maybe some sort of hardware, cpu failure or ...?

My computer is a 10 month old Dell Dimension 4600, Pentium 4, 3.06 Ghz with 512 Mb RAM.

Here's a short crash dump summary and MS debugger session output:

--------------------------------------------------

BugCheck 1000007F, {8, 80042000, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KeReleaseQueuedSpinLockFromDpcLevel+1c )


Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 80042000
Arg3: 00000000
Arg4: 00000000


BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 00000000 to 8052fba8

STACK_TEXT:
f7c4bc1c 00000000 00000000 00000000 00000000 nt!KeReleaseQueuedSpinLockFromDpcLevel+0x1c


FOLLOWUP_IP:
nt!KeReleaseQueuedSpinLockFromDpcLevel+1c
8052fba8 c3 ret

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KeReleaseQueuedSpinLockFromDpcLevel+1c

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3ea80977

STACK_COMMAND: kb

BUCKET_ID: 0x7f_8_nt!KeReleaseQueuedSpinLockFromDpcLevel+1c

Followup: MachineOwner




---------------------------------------------------

Ok, somewhere in the information above is a lead to the solution, but i'm not that technical...

Thanks in advance for any usefull information that will point me in the right direction.

OK, lets post this message now, before i get another BSOD.... :-(

 

1 512 MB memory or 2x256 sticks. If two, then try running on each stick by itself to isolate.

Reseat ALL internal hardware cards including CPU. Reseat cables internally. Check for heat problems. Clean any dust from CPU/heatsink and fan and power supply fan. Check for driver updates for Mobo chipset, graphics, sound and other hardware.

Mobo BIOS update?

Check your event logs in admin tools for any clues.

 

Code:

I get sudden BSODs with different Stop messages (0x0000008e and 0x0000007f)

The 8E implies a malfunctioning driver. A double fault could be caused by software, especially since you are seeing an 8e with those 7fs

Nice work on getting the debugger running, its a peice of work to get configured, very cool you got that output out of it. Just to be sure we are getting a complete stack, run that dump through the tool and see if the STACK_TEXT looks any different. If so, please post the log, otherwise just confirm this is all we get. I'd really like to see some output from the 8E dump, since it could be whatever is causing that is the first of the 'double' faults. ( a double fault is a fault while handling a fault).

Frequently, however, 7fs can turn out to be flakey hardware(usually ram). Paul's track is spot-on for beginning steps for that route. A good idea to do those steps, fer sure.

 

Alright, thanks guys. Really appreciate your help.
I'm going to try your suggestions and post a message on succes or failure.

cheers

 

Dump Data for my annoying BSOD

Hello, here i am again,

Unfortunately the Blue screens of death didn't vanish since my last post (and your replies)
I'm still getting them, and still absolutely random so it seems.
Sometimes directly after booting, then after an hour, or a few minutes.
Stop codes vary from 0x0000007F, 0x0000008E, 0x00000050, 0x0000000A
But 7F and 8E most of the time.

My best guess is that my RAM is corrupt.
I tried to remove 1 RAM module, and tried the other one on it's own, and vice versa. But still no good news.
I still hope it's software related, like a driver or something.
So here's a fresh dump.

Thanks again. The next dump is from a 0x0000008e STOP message as JoeHobart requested.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 7ffd7000, eded4ad4, 0}

Probably caused by : win32k.sys ( win32k!StoreMessage+4a )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
An exception code of 0x80000002 (STATUS_DATATYPE_MISALIGNMENT) indicates
that an unaligned data reference was encountered.  The trap frame will
supply additional information.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 7ffd7000, The address that the exception occurred at
Arg3: eded4ad4, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. De lees- of schrijfbewerking ( "%s ") op het geheugen is mislukt.

FAULTING_IP: 
+7ffd7000
7ffd7000 ??               ???

TRAP_FRAME:  eded4ad4 -- (.trap ffffffffeded4ad4)
.trap ffffffffeded4ad4
ErrCode = 00000000
eax=00000001 ebx=ede54c4c ecx=00000000 edx=00000000 esi=00feffdc edi=e1b38738
eip=7ffd7000 esp=eded4b48 ebp=ede54b60 iopl=0         nv up ei pl zr na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
7ffd7000 ??               ???
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT:  3

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x8E

LAST_CONTROL_TRANSFER:  from 8201b388 to 7ffd7000

SYMBOL_ON_RAW_STACK:  1

STACK_TEXT:  
WARNING: Frame IP not in any known module. Following frames may be wrong.
eded4b44 8201b388 00fefd80 00000018 00fefda8 0x7ffd7000
00010246 00000000 00000000 00000000 00000000 0x8201b388


STACK_COMMAND:  .trap ffffffffeded4ad4; dds @$csp ; kb

FOLLOWUP_IP: 
win32k!StoreMessage+4a
bf873200 809c080000894118 sbb     byte ptr [eax+ecx+0x41890000],0x18

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  win32k!StoreMessage+4a

MODULE_NAME:  win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  3f73195d

BUCKET_ID:  0x8E_win32k!StoreMessage+4a

Followup: MachineOwner
---------

eax=00000001 ebx=ede54c4c ecx=00000000 edx=00000000 esi=00feffdc edi=e1b38738
eip=7ffd7000 esp=eded4b48 ebp=ede54b60 iopl=0         nv up ei pl zr na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
7ffd7000 ??               ???
ChildEBP RetAddr  Args to Child              
WARNING: Frame IP not in any known module. Following frames may be wrong.
eded4b44 8201b388 00fefd80 00000018 00fefda8 0x7ffd7000
00010246 00000000 00000000 00000000 00000000 0x8201b388
start    end        module name
804d4000 806ba000   nt       ntkrnlmp.exe Thu Apr 24 17:57:43 2003 (3EA80977)
806ba000 806d9b80   hal      halmacpi.dll Thu Aug 29 10:05:02 2002 (3D6DD5AE)
bf800000 bf9b6b80   win32k   win32k.sys   Thu Sep 25 18:35:41 2003 (3F73195D)
bf9b7000 bfcb0920   nv4_disp nv4_disp.dll Fri Apr 25 02:35:22 2003 (3EA882CA)
bff80000 bff90d80   dxg      dxg.sys      Mon Sep 09 23:06:55 2002 (3D7D0D6F)
bffa0000 bffe2980   ATMFD    ATMFD.DLL    Fri Aug 17 23:55:56 2001 (3B7D92EC)
edde8000 ede0ee80   kmixer   kmixer.sys   Thu Aug 29 10:32:28 2002 (3D6DDC1C)
ede0f000 ede21e80   wdmaud   wdmaud.sys   Thu Aug 29 11:00:46 2002 (3D6DE2BE)
ede22000 ede44b80   aec      aec.sys      Mon Aug 12 19:54:24 2002 (3D57F650)
edee5000 edff1f80   BCMSM    BCMSM.sys    Tue Feb 25 03:29:56 2003 (3E5AD524)
ee002000 ee00e380   DMusic   DMusic.sys   Fri Aug 17 22:59:49 2001 (3B7D85C5)
ee012000 ee01f400   swmidi   swmidi.sys   Fri Aug 17 23:00:42 2001 (3B7D85FA)
ee022000 ee02fe00   sysaudio sysaudio.sys Thu Aug 29 11:01:17 2002 (3D6DE2DD)
ee1aa000 ee1f8a00   srv      srv.sys      Fri Mar 28 20:54:53 2003 (3E84A88D)
ee2b5000 ee2b8f00   MODEMCSA MODEMCSA.sys Fri Aug 17 22:57:37 2001 (3B7D8541)
ee2e9000 ee313280   mrxdav   mrxdav.sys   Fri Aug 17 22:50:20 2001 (3B7D838C)
ee4f4000 ee514380   afd      afd.sys      Thu Aug 29 11:01:13 2002 (3D6DE2D9)
ee575000 ee578080   ndisuio  ndisuio.sys  Thu Mar 06 19:30:57 2003 (3E6793E1)
ee625000 ee632e80   aswMon2  aswMon2.SYS  Sun Jun 13 00:28:24 2004 (40CB8388)
ee8f6000 ee90b380   dump_atapi dump_atapi.sys Thu Aug 29 10:27:48 2002 (3D6DDB04)
ee934000 ee993d80   mrxsmb   mrxsmb.sys   Mon Nov 18 20:27:37 2002 (3DD93F29)
ee994000 ee9bbe00   rdbss    rdbss.sys    Thu Aug 29 10:58:48 2002 (3D6DE248)
ee9bc000 ee9e0700   netbt    netbt.sys    Wed Jul 09 01:48:51 2003 (3F0B5863)
ee9e1000 eea32480   tcpip    tcpip.sys    Thu Aug 29 10:58:10 2002 (3D6DE222)
f7b8b000 f7bac780   update   update.sys   Sat Aug 18 05:53:56 2001 (3B7DE6D4)
f7bad000 f7bbd200   psched   psched.sys   Thu Aug 29 10:35:54 2002 (3D6DDCEA)
f7bbe000 f7bd3600   ndiswan  ndiswan.sys  Thu Aug 29 10:58:38 2002 (3D6DE23E)
f7bd4000 f7bf4c80   portcls  portcls.sys  Thu Aug 29 11:00:58 2002 (3D6DE2CA)
f7bf5000 f7c82d80   smwdm    smwdm.sys    Tue May 06 15:14:31 2003 (3EB7B537)
f7c83000 f7ca2d00   ks       ks.sys       Wed Dec 04 18:09:38 2002 (3DEE36D2)
f7ca3000 f7cb5980   parport  parport.sys  Thu Aug 29 10:27:29 2002 (3D6DDAF1)
f7cb6000 f7cd9800   e100b325 e100b325.sys Tue Mar 04 20:56:25 2003 (3E6504E9)
f7cda000 f7cfb180   USBPORT  USBPORT.SYS  Thu Aug 29 10:32:49 2002 (3D6DDC31)
f7cfc000 f7d0d500   VIDEOPRT VIDEOPRT.SYS Thu Aug 29 10:32:03 2002 (3D6DDC03)
f7d0e000 f7e35620   nv4_mini nv4_mini.sys Fri Apr 25 02:31:49 2003 (3EA881F5)
f7e3a000 f7e3c280   rasacd   rasacd.sys   Fri Aug 17 22:55:39 2001 (3B7D84CB)
f7e42000 f7e44580   hidusb   hidusb.sys   Fri Aug 17 23:02:16 2001 (3B7D8658)
f7e5e000 f7e6bf00   redbook  redbook.sys  Thu Aug 29 10:27:45 2002 (3D6DDB01)
f7e6e000 f7e79980   cdrom    cdrom.sys    Thu Aug 29 10:27:55 2002 (3D6DDB0B)
f7e7e000 f7e8d800   serial   serial.sys   Thu Aug 29 11:08:27 2002 (3D6DE48B)
f7e8e000 f7e9ab80   i8042prt i8042prt.sys Thu Aug 29 11:06:37 2002 (3D6DE41D)
f7e9e000 f7ea6200   processr processr.sys Thu Aug 29 10:05:03 2002 (3D6DD5AF)
f8382000 f8385f80   TDI      TDI.SYS      Fri Aug 17 22:57:25 2001 (3B7D8535)
f8386000 f8388580   ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f83c3000 f83dc680   Mup      Mup.sys      Thu Aug 29 11:12:53 2002 (3D6DE595)
f83dd000 f8404a80   NDIS     NDIS.sys     Thu Mar 06 19:30:56 2003 (3E6793E0)
f8405000 f848e300   Ntfs     Ntfs.sys     Thu Aug 29 11:13:37 2002 (3D6DE5C1)
f848f000 f84a2780   KSecDD   KSecDD.sys   Fri Aug 17 22:50:01 2001 (3B7D8379)
f84a3000 f84b3e80   sr       sr.sys       Thu Aug 29 10:17:56 2002 (3D6DD8B4)
f84b4000 f84c9380   atapi    atapi.sys    Thu Aug 29 10:27:48 2002 (3D6DDB04)
f84ca000 f84e8b00   ftdisk   ftdisk.sys   Fri Aug 17 22:52:41 2001 (3B7D8419)
f84e9000 f8514f80   ACPI     ACPI.sys     Thu Aug 29 10:09:03 2002 (3D6DD69F)
f8536000 f8545600   pci      pci.sys      Thu Aug 29 10:09:10 2002 (3D6DD6A6)
f8546000 f854ee00   isapnp   isapnp.sys   Fri Aug 17 22:58:01 2001 (3B7D8559)
f8556000 f855f280   MountMgr MountMgr.sys Fri Aug 17 22:47:36 2001 (3B7D82E8)
f8566000 f8572480   VolSnap  VolSnap.sys  Fri Aug 17 22:53:19 2001 (3B7D843F)
f8576000 f857e400   disk     disk.sys     Thu Aug 29 10:27:56 2002 (3D6DDB0C)
f8586000 f8591500   CLASSPNP CLASSPNP.SYS Thu Aug 29 11:08:42 2002 (3D6DE49A)
f85b6000 f85bfb80   imapi    imapi.sys    Thu Aug 29 10:28:05 2002 (3D6DDB15)
f85c6000 f85d4200   drmk     drmk.sys     Thu Aug 29 10:32:30 2002 (3D6DDC1E)
f85d6000 f85e1d00   rasl2tp  rasl2tp.sys  Thu Aug 29 11:06:36 2002 (3D6DE41C)
f85e6000 f85ef800   raspppoe raspppoe.sys Fri Aug 17 22:55:33 2001 (3B7D84C5)
f85f6000 f8601480   raspptp  raspptp.sys  Wed Oct 02 02:52:28 2002 (3D9A434C)
f8606000 f860e400   msgpc    msgpc.sys    Fri Aug 17 22:54:19 2001 (3B7D847B)
f8616000 f861f400   termdd   termdd.sys   Thu Aug 29 10:40:32 2002 (3D6DDE00)
f8626000 f862f480   NDProxy  NDProxy.SYS  Fri Aug 17 22:55:30 2001 (3B7D84C2)
f8636000 f8642b00   usbhub   usbhub.sys   Thu Aug 29 10:32:49 2002 (3D6DDC31)
f8646000 f864e700   HIDCLASS HIDCLASS.SYS Thu Aug 29 10:32:40 2002 (3D6DDC28)
f8656000 f8664280   ipsec    ipsec.sys    Thu Aug 29 11:07:19 2002 (3D6DE447)
f8666000 f866e180   netbios  netbios.sys  Thu Aug 29 10:35:45 2002 (3D6DDCE1)
f8686000 f868e900   Fips     Fips.SYS     Sat Aug 18 03:31:49 2001 (3B7DC585)
f8696000 f869e200   wanarp   wanarp.sys   Fri Aug 17 22:55:23 2001 (3B7D84BB)
f86a6000 f86b4900   Cdfs     Cdfs.SYS     Thu Aug 29 10:58:50 2002 (3D6DE24A)
f87b6000 f87bbc80   PCIIDEX  PCIIDEX.SYS  Thu Aug 29 10:27:47 2002 (3D6DDB03)
f87be000 f87c2900   PartMgr  PartMgr.sys  Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f87c6000 f87cabc0   PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
f87ce000 f87d4380   agp440   agp440.sys   Fri Aug 17 22:57:59 2001 (3B7D8557)
f8836000 f883d180   Modem    Modem.SYS    Fri Aug 17 22:57:35 2001 (3B7D853F)
f889e000 f88a2b80   usbuhci  usbuhci.sys  Thu Aug 29 10:32:48 2002 (3D6DDC30)
f88a6000 f88aab80   usbehci  usbehci.sys  Thu Aug 29 10:32:47 2002 (3D6DDC2F)
f88ae000 f88b3d80   kbdclass kbdclass.sys Thu Aug 29 10:26:59 2002 (3D6DDAD3)
f88b6000 f88ba580   ptilink  ptilink.sys  Fri Aug 17 22:49:53 2001 (3B7D8371)
f88be000 f88c2080   raspti   raspti.sys   Fri Aug 17 22:55:32 2001 (3B7D84C4)
f88c6000 f88cb800   mouclass mouclass.sys Thu Aug 29 10:27:00 2002 (3D6DDAD4)
f88ce000 f88d2300   omci     omci.sys     Tue Nov 05 00:05:02 2002 (3DC6FD1E)
f88d6000 f88dbc80   HIDPARSE HIDPARSE.SYS Fri Aug 17 23:02:04 2001 (3B7D864C)
f88e6000 f88ead00   vga      vga.sys      Thu Aug 29 10:32:03 2002 (3D6DDC03)
f88ee000 f88f2680   Msfs     Msfs.SYS     Fri Aug 17 22:50:02 2001 (3B7D837A)
f88f6000 f88fd380   Npfs     Npfs.SYS     Fri Aug 17 22:50:03 2001 (3B7D837B)
f8946000 f8949000   BOOTVID  BOOTVID.dll  Fri Aug 17 22:49:09 2001 (3B7D8345)
f89ea000 f89ed000   mouhid   mouhid.sys   Fri Aug 17 22:47:57 2001 (3B7D82FD)
f89f2000 f89f5e40   ASPI32   ASPI32.SYS   Sat Sep 11 01:46:10 1999 (37D99842)
f89f6000 f89f9040   Aavmker4 Aavmker4.SYS Sun Jun 13 12:38:38 2004 (40CC2EAE)
f8a0e000 f8a12000   watchdog watchdog.sys Thu Aug 29 10:32:20 2002 (3D6DDC14)
f8a12000 f8a14900   Dxapi    Dxapi.sys    Fri Aug 17 22:53:19 2001 (3B7D843F)
f8a32000 f8a35a80   serenum  serenum.sys  Fri Aug 17 22:50:13 2001 (3B7D8385)
f8a36000 f8a37b80   kdcom    kdcom.dll    Fri Aug 17 22:49:10 2001 (3B7D8346)
f8a38000 f8a39100   WMILIB   WMILIB.SYS   Fri Aug 17 23:07:23 2001 (3B7D878B)
f8a72000 f8a73120   aeaudio  aeaudio.sys  Mon Apr 01 16:39:14 2002 (3CA87112)
f8a7a000 f8a7b280   USBD     USBD.SYS     Fri Aug 17 23:02:58 2001 (3B7D8682)
f8a7c000 f8a7de00   i2omgmt  i2omgmt.SYS  Fri Aug 17 22:56:15 2001 (3B7D84EF)
f8a7e000 f8a7ff00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 22:49:37 2001 (3B7D8361)
f8a80000 f8a81080   Beep     Beep.SYS     Fri Aug 17 22:47:33 2001 (3B7D82E5)
f8a82000 f8a83080   mnmdd    mnmdd.SYS    Fri Aug 17 22:57:28 2001 (3B7D8538)
f8a84000 f8a85080   RDPCDD   RDPCDD.sys   Fri Aug 17 22:46:56 2001 (3B7D82C0)
f8a86000 f8a87100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8ac4000 f8ac5b00   ParVdm   ParVdm.SYS   Fri Aug 17 22:49:49 2001 (3B7D836D)
f8ac8000 f8ac9700   splitter splitter.sys Thu Aug 29 10:32:27 2002 (3D6DDC1B)
f8afe000 f8afed00   pciide   pciide.sys   Fri Aug 17 22:51:49 2001 (3B7D83E5)
f8b2e000 f8b2eb00   drmkaud  drmkaud.sys  Thu Aug 29 10:32:32 2002 (3D6DDC20)
f8c17000 f8c17b80   Null     Null.SYS     Fri Aug 17 22:47:39 2001 (3B7D82EB)
f8c35000 f8c35c00   audstub  audstub.sys  Fri Aug 17 22:59:40 2001 (3B7D85BC)
f8c3a000 f8c3b000   swenum   swenum.sys   Wed Dec 04 18:10:07 2002 (3DEE36EF)
f8c81000 f8c81d00   dxgthk   dxgthk.sys   Fri Aug 17 22:53:12 2001 (3B7D8438)

Unloaded modules:
f8aa0000 f8aa2000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8a9e000 f8aa0000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8a9a000 f8a9c000   MSPCLOCK.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8676000 f8680000   p3.sys  
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f88de000 f88e3000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7e46000 f7e49000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000

 

man, i cant be 100% sure with just that output, but that reeks of corrupted memory. Couple that with the stop codes all over the place and you definatly have a hardware issue. Highly dissapointing that the ram isolation didnt reveal a faulty module.

At this point i think your best bet is to call dell and see what your options are. Im no hardware guru by any means, but certainly you have extensive evidence to warrent some swaparoo.

 

Might try doing an MS Memory Diagnostic.