PC Crashes [DUMP LOG]

Hello All,

My PC keeps crashing (around 4 times in a 6 hour period) and tends to be when online(99% of the time).

My PC freezes for about 2 seconds, then the screen goes black, but the box is still on. When I reset the power button (by keeping pressed for 5 seconds) the PC boots up okay and I sometimes get he following messgaes:

http://www.beachfleet.co.uk/images/error1.jpg

Then when I click on detail, I get:

http://www.beachfleet.co.uk/images/error2.jpg

Then the technical error report reads:

http://www.beachfleet.co.uk/images/error3.jpg

Any help would be greatly appretiated, as it's driving me nuts!
Regards,
Donhinio.

 

Below the dump data log, hope I've done it correctly...

===================================================


Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS Personal
Debug session time: Mon Oct 24 17:10:54.000 2005 (GMT+0)
System Uptime: not available
Process Uptime: 0 days 0:09:31.000
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
........................................................................................................................................................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(988.914): Access violation - code c0000005 (first/second chance not available)
eax=0000001f ebx=00003bb8 ecx=00000020 edx=01000000 esi=23204af8 edi=1f2414fc
eip=1f1ba759 esp=21d6fd38 ebp=21d6fd70 iopl=0 nv up ei ng nz na po cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000287
*** WARNING: Unable to verify checksum for NeAudio.ax
*** ERROR: Symbol file could not be found. Defaulted to export symbols for NeAudio.ax -
NeAudio!DllUnregisterServer+0x18879:
1f1ba759 0fbf1e movsx ebx,word ptr [esi] ds:0023:23204af8=????
0:029> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** ERROR: Symbol file could not be found. Defaulted to export symbols for CLEdtKrn.dll -

 

Video card driver or faulty vid

Hi,

Your windows is crashed with bugcheck code x'EA'. Usually it is caused by faulty device driver or video card. Make sure that your vid is not overheat as well.

 

Hello CPC2004,

Thanks for your post.

How can I find out exactly what is the problem (card or driver), and what can I do to put it right?

Secondly, sorry to be an absolute amature, but what is my vid, and how can I check if it is over heating?

Many thanks,
Donhinio.

 

Futher to my post above, my PC has just crashed again, and here is the latest log: (anything to suggest is the graphic card or driver again?);


- CLICK HERE TO VIEW LOG>>>

 

I want the minidump and not user.dmp

Hi,

Your debug report is the DrWatson dump and I want the minidump. You can find it at the folder \windows\minidumps.

The system event log is also very useful to diagnostic your problem
Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001/1003. Copy the content and paste it back here

 

Hello,

Mini dump is here:

Mini021806-01.dmp


Event Viewer is here:

eventvwr.txt

Regards,
Donhinio.

 

Attach more minidumps

Hi,

BugCheck EA, {8588d6b0, 8589c850, 84883200, 1}
Probably caused by : ati2cqag.dll ( ati2cqag+2df9 )

Your windows' crashes are caused by mutiple culprit. The first culprit is Norton AV. Your version of Norton AV causes blue screen. Upgrade Norton AV to latest patch level. I find serveral hits at google relating to your ATI display driver and I have to do research at Internet.

Attach Mini021606-01.dmp and Mini020406-01.dmp here.

 

Hello,

Mini021606-01.dmp

Mini020406-01.dmp

Many thanks ,
Donhinio.

 

Hi,

Both url links point to Mini021606-01.dmp. Attach Mini020406-01.dmp here. The second minidump is crashed with faulty ram or Norton AV.

Suggestion
1. Upgrade Norton AV
2. Run memtest to stress test your ram
3. Make sure that your PC is not overheat

Mini021606-01.dmp

Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Fri Feb 17 03:57:08.140 2006 (GMT+8)
System Uptime: 0 days 1:07:35.714

BugCheck 24, {1902fe, f79d3904, f79d3600, f7332923}
Probably caused by : Ntfs.sys ( Ntfs!NtfsCheckpointVolume+9fe )
Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001902fe
Arg2: f79d3904
Arg3: f79d3600
Arg4: f7332923

Debugging Details:
------------------
EXCEPTION_RECORD: f79d3904 -- (.exr fffffffff79d3904)
ExceptionAddress: f7332923 (Ntfs!NtfsCheckpointVolume+0x000009fe)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 589a32f7
Attempt to read from address 589a32f7

CONTEXT: f79d3600 -- (.cxr fffffffff79d3600)
eax=85c5016e ebx=87188100 ecx=00000280 edx=00000a00 esi=589a32f7 edi=85c50172
eip=f7332923 esp=f79d39cc ebp=f79d3be0 iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010212
Ntfs!NtfsCheckpointVolume+0x9fe:
f7332923 f3a5 rep movsd ds:589a32f7=???????? es:85c50172=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from f73330a8 to f7332923

STACK_TEXT:
f79d3be0 f73330a8 f79d3c14 87188100 00000000 Ntfs!NtfsCheckpointVolume+0x9fe
f79d3d74 80533dd0 00000000 00000000 871c55b8 Ntfs!NtfsCheckpointAllVolumes+0xd2
f79d3dac 805c4a06 00000000 00000000 00000000 nt!ExpWorkerThread+0x100
f79d3ddc 80540fa2 80533cd0 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

 

Thanks CPC2004,

I appretiate your time on this , I need all the help I can get!.

1) I have run a live update, which Norton tell me will update all patches (is this what you meant by upgrading?)

2) How do I stress test the RAM?

3) I have Everest, should I post temperaure results here?

Many thanks,
Donhinio.

 

memtest

Hi,

http://www.memtest.org

 

Hi,

Ran the memtest, it took about 45 mins and completed once with no errors.

What next should I look at next, the temperature? If so, what should I post here?

Many thanks,
Donhinio.

 

Hi,

Some faulty ram can pass memtest. Reseat the memory module to another memroy slot.

 

In case you have 2 RAM modules, remove one & power on. Test system for sometime. Swap the modules & test again. If there is some problem with RAM it should come up in one & not in other scenario unless you are really unlucky & both your modules are bad.

 

Hello,

I will try that in the next few days.

In the meantime, I have a screen shot of my temperatures (using Everest) directly from rebooting after a crash today:

Click here for temperature readings

Do they look right?

Regards,
Donhinio.