BSOD - XP Restart by itself + crush dump for analyze

my blue screen (the last one) show

0x000000F4 (0x00000003 0x820F2020 0x820F2194 0x80604418)


in the mini dump i has 2 file so i'll post the other one in the next post (same thread)

thanks a lot for your time


Opened log file 'c:\debuglog.txt'
1: kd> !analyze -v;r;kv;lmnt;.logclose
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8228b1c8, Terminating object
Arg3: 8228b33c, Process image file name
Arg4: 80604418, Explanatory message (ascii)

Debugging Details:
------------------

Unable to load image klif.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys

PROCESS_OBJECT: 8228b1c8

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000

EXCEPTION_RECORD: f87969d8 -- (.exr fffffffff87969d8)
.exr fffffffff87969d8
ExceptionAddress: 7723b399
ExceptionCode: c0000006 (In-page I/O error)
ExceptionFlags: 00000000
NumberParameters: 3
Parameter[0]: 00000000
Parameter[1]: 7723b399
Parameter[2]: c000009a
Inpage operation failed at 7723b399, due to I/O error c000009a

EXCEPTION_CODE: (NTSTATUS) 0xc000009a - <Unable to get error code text>

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: csrss.exe

ERROR_CODE: (NTSTATUS) 0xc0000006 - <Unable to get error code text>

IO_ERROR: (NTSTATUS) 0xc000009a - <Unable to get error code text>

EXCEPTION_STR: 0xc0000006_c000009a

BUGCHECK_STR: 0xF4_IOERR_C000009A

STACK_TEXT:
f87964b4 80633f6d 000000f4 00000003 8228b1c8 nt!KeBugCheckEx+0x1b
f87964d8 806043d6 80604418 8228b1c8 8228b33c nt!PspCatchCriticalBreak+0x75
f8796508 f662d95e 8228b410 c0000006 f8796604 nt!NtTerminateProcess+0x7d
WARNING: Stack unwind information not available. Following frames may be wrong.
f8796584 804e46a7 badb0d00 f87965fc 0118002e klif+0x1d95e
f87965f4 80521fdc ffffffff c0000006 f87969f8 nt!ZwTerminateProcess+0x11
f87969b0 805053e0 f87969d8 00000000 f8796d64 nt!KiDispatchException+0x3a0
f8796d34 804e12a8 010afbe8 010afc08 00000000 nt!KiRaiseException+0x175
f8796d50 804dd99f 010afbe8 010afc08 00000000 nt!NtRaiseException+0x33
f8796d50 7723b399 010afbe8 010afc08 00000000 nt!KiFastCallEntry+0xfc
010afff4 00000000 00000000 00000000 00000000 0x7723b399


FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_csrss.exe

BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_csrss.exe

Followup: MachineOwner
---------

eax=f87d713c ebx=8228b1c8 ecx=00000000 edx=00000000 esi=8228b1c8 edi=81fb6578
eip=8053738a esp=f879649c ebp=f87964b4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8053738a 5d pop ebp
ChildEBP RetAddr Args to Child
f87964b4 80633f6d 000000f4 00000003 8228b1c8 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f87964d8 806043d6 80604418 8228b1c8 8228b33c nt!PspCatchCriticalBreak+0x75 (FPO: [Non-Fpo])
f8796508 f662d95e 8228b410 c0000006 f8796604 nt!NtTerminateProcess+0x7d (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f8796584 804e46a7 badb0d00 f87965fc 0118002e klif+0x1d95e
f87965f4 80521fdc ffffffff c0000006 f87969f8 nt!ZwTerminateProcess+0x11 (FPO: [2,0,0])
f87969b0 805053e0 f87969d8 00000000 f8796d64 nt!KiDispatchException+0x3a0 (FPO: [Non-Fpo])
f8796d34 804e12a8 010afbe8 010afc08 00000000 nt!KiRaiseException+0x175 (FPO: [Non-Fpo])
f8796d50 804dd99f 010afbe8 010afc08 00000000 nt!NtRaiseException+0x33
f8796d50 7723b399 010afbe8 010afc08 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f8796d64)
010afff4 00000000 00000000 00000000 00000000 0x7723b399
start end module name
804d7000 806fd000 nt ntkrnlmp.exe Wed Feb 28 12:08:32 2007 (45E54690)
806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Fri Aug 27 03:53:56 2004 (412E8624)
bf800000 bf9c2100 win32k win32k.sys Thu Mar 08 16:47:34 2007 (45F013F6)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Fri Aug 27 03:53:49 2004 (412E861D)
f1275000 f129f180 kmixer kmixer.sys Wed Jun 14 11:47:45 2006 (448FCD31)
f14a1000 f14c4000 Fastfat Fastfat.SYS Wed Aug 04 09:14:15 2004 (41107EB7)
f417b000 f417e800 asyncmac asyncmac.sys Wed Aug 04 09:05:02 2004 (41107C8E)
f424f000 f428f280 HTTP HTTP.sys Fri Mar 17 03:33:09 2006 (441A03C5)
f45d8000 f4629480 srv srv.sys Mon Aug 14 13:34:39 2006 (44E051BF)
f485a000 f4886400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
f4a67000 f4a7b400 wdmaud wdmaud.sys Wed Jun 14 12:00:44 2006 (448FD03C)
f5394000 f53a2d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
f5484000 f5499580 irda irda.sys Wed Aug 04 09:00:50 2004 (41107B92)
f65a8000 f65bf480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f6610000 f664e000 klif klif.sys Wed Jun 27 16:31:57 2007 (468266CD)
f664e000 f66bca00 mrxsmb mrxsmb.sys Fri May 05 12:41:42 2006 (445B1DD6)
f66bd000 f66be000 SPCA561 SPCA561.SYS unavailable (00000000)
f66da000 f6704a00 rdbss rdbss.sys Fri May 05 12:47:55 2006 (445B1F4B)
f6711000 f6713900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
f672d000 f674ed00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
f674f000 f6776c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f6777000 f6797f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
f6798000 f67efd80 tcpip tcpip.sys Thu Apr 20 14:51:47 2006 (444775D3)
f67f0000 f6802400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f6823000 f6826280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
f796f000 f7971440 FileDisk FileDisk.SYS Thu Jan 19 01:30:00 2006 (43CEC168)
f7973000 f79cbe80 update update.sys Mon Apr 23 13:32:54 2007 (462C8B56)
f79cc000 f79fc100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
f79fd000 f7a0de00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
f7aae000 f7ac4680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
f7c66000 f7c79800 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
f7ca2000 f7cc5980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
f7cc6000 f808ddc0 ALCXWDM ALCXWDM.SYS Fri Apr 21 06:16:37 2006 (44484E95)
f808e000 f80b0e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
f80b1000 f80d3680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f80d4000 f80e7780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
f80e8000 f82b73c0 nv4_mini nv4_mini.sys Thu Apr 08 05:30:48 2004 (4074B958)
f82bc000 f82bfc80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
f82d4000 f82d6580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
f82e0000 f82e2c00 irenum irenum.sys Wed Aug 04 09:00:45 2004 (41107B8D)
f82e4000 f82e7c80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
f8328000 f8344000 kl1 kl1.sys Sat Apr 28 15:50:13 2007 (46334305)
f8344000 f835e580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f835f000 f838ba80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f838c000 f8418400 Ntfs Ntfs.sys Fri Feb 09 14:10:31 2007 (45CC56A7)
f8419000 f842f780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
f8430000 f8441e80 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
f8442000 f8443000 fltMgr fltMgr.sys unavailable (00000000)
f8462000 f8479480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f847a000 f8491800 SCSIPORT SCSIPORT.SYS Wed Aug 04 08:59:39 2004 (41107B4B)
f8492000 f84b7780 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
f84b8000 f84d6880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
f84d7000 f84e7780 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
f84e8000 f8515b80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
f8537000 f853fc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
f8547000 f8551500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
f8557000 f8563c00 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
f8567000 f856fe00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
f8577000 f8583200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
f8587000 f858fb80 PxHelp20 PxHelp20.sys Sat Feb 03 00:23:57 2007 (45C3ABED)
f8597000 f85a1e80 uagp35 uagp35.sys Wed Aug 04 09:07:43 2004 (41107D2F)
f85d7000 f85d8000 cxvcap cxvcap.sys unavailable (00000000)
f85e7000 f85f2e00 STREAM STREAM.SYS Wed Aug 04 09:07:58 2004 (41107D3E)
f85f7000 f8601380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
f8607000 f8613180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
f8617000 f8624e80 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
f8627000 f8635b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
f8637000 f8646900 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
f8647000 f8653800 i8042prt i8042prt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f8657000 f8663880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
f8667000 f8671200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
f8677000 f8682d00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
f8687000 f868f900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
f8697000 f86a0f00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
f86a7000 f86b0480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
f86b7000 f86c5100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
f86c7000 f86cf700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
f86d7000 f86df700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
f8707000 f870f880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
f8767000 f8776900 Cdfs Cdfs.SYS Wed Aug 04 09:14:09 2004 (41107EB1)
f87a7000 f87b0b00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
f87b7000 f87bd200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
f87bf000 f87c3900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
f87c7000 f87ccf00 VClone VClone.sys Sat Apr 22 22:59:21 2006 (444A8B19)
f87cf000 f87d3880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
f87df000 f87e3580 ckldrv ckldrv.sys Tue Jan 10 05:47:26 2006 (43C3203E)
f885f000 f8863500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
f88af000 f88b6000 GEARAspiWDM GEARAspiWDM.sys Wed Feb 02 08:19:49 2005 (420062F5)
f88b7000 f88bc000 usbuhci usbuhci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f88bf000 f88c5800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f88c7000 f88cda00 fetnd5 fetnd5.sys Fri Jul 20 14:40:24 2001 (3B5818A8)
f88cf000 f88d3900 irsir irsir.sys Fri Aug 17 23:51:28 2001 (3B7D83D0)
f88d7000 f88dc980 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f88df000 f88e4f80 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f88e7000 f88ef000 klim5 klim5.sys Wed Apr 04 13:58:00 2007 (461384B8)
f88ef000 f88f3c80 rasirda rasirda.sys Fri Aug 17 23:51:29 2001 (3B7D83D1)
f88f7000 f88fb580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
f88ff000 f8903080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
f8907000 f8908000 CXTUNER CXTUNER.sys unavailable (00000000)
f8927000 f892c200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
f892f000 f8933a80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
f8937000 f893e880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
f893f000 f8946260 SCDEmu SCDEmu.SYS Mon Apr 09 15:27:07 2007 (461A311B)
f8947000 f894a000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
f89fb000 f89fc000 CXXBAR CXXBAR.sys unavailable (00000000)
f8a23000 f8a25280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
f8a37000 f8a38b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
f8a39000 f8a3a100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8a3b000 f8a3c500 viaide viaide.sys Wed Aug 04 08:59:42 2004 (41107B4E)
f8a3d000 f8a3e000 dmload dmload.sys unavailable (00000000)
f8a6f000 f8a70000 ParVdm ParVdm.SYS unavailable (00000000)
f8a83000 f8a84200 ElbyDelay ElbyDelay.sys Tue Apr 12 11:41:20 2005 (425B89B0)
f8a85000 f8a86100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
f8a8b000 f8a8c280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
f8a8d000 f8a8e000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
f8a8f000 f8a90080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
f8a91000 f8a92080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
f8a93000 f8a94080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
f8ab3000 f8ab4100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8ac9000 f8acaf80 ElbyCDIO ElbyCDIO.sys Sat Apr 22 04:44:39 2006 (44498A87)
f8aff000 f8affd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
f8b58000 f8b58c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
f8b8b000 f8b8bd00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
f8c04000 f8c05000 Null Null.SYS unavailable (00000000)
f8c15000 f8c15a00 mchInjDrv mchInjDrv.sys Wed Jan 11 10:07:52 2006 (43C4AEC8)

Unloaded modules:
f8a7b000 f8a7d000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f14e6000 f1511000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3fdc000 f3fe3000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f14e6000 f1511000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f14e6000 f1511000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f14e6000 f1511000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2899000 f28c4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2899000 f28c4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f293c000 f2967000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f401c000 f4047000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bd4000 f8bd5000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4aec000 f4af9000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6518000 f6526000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8a65000 f8a67000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f891f000 f8924000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8a1f000 f8a22000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8917000 f891c000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f890f000 f8916000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


and the next log ...

 

and the other log...

cause there were 2 mini dump and i didnt know wich one was the right one


Opened log file 'c:\debuglog.txt'
1: kd> !analyze -v;r;kv;lmnt
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 820f2020, Terminating object
Arg3: 820f2194, Process image file name
Arg4: 80604418, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: 820f2020

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000

EXCEPTION_RECORD: f65779d8 -- (.exr fffffffff65779d8)
.exr fffffffff65779d8
ExceptionAddress: 7723b399
ExceptionCode: c0000006 (In-page I/O error)
ExceptionFlags: 00000000
NumberParameters: 3
Parameter[0]: 00000000
Parameter[1]: 7723b399
Parameter[2]: c000009a
Inpage operation failed at 7723b399, due to I/O error c000009a

EXCEPTION_CODE: (NTSTATUS) 0xc000009a - <Unable to get error code text>

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: csrss.exe

ERROR_CODE: (NTSTATUS) 0xc0000006 - <Unable to get error code text>

IO_ERROR: (NTSTATUS) 0xc000009a - <Unable to get error code text>

EXCEPTION_STR: 0xc0000006_c000009a

BUGCHECK_STR: 0xF4_IOERR_C000009A

STACK_TEXT:
f65774b4 80633f6d 000000f4 00000003 820f2020 nt!KeBugCheckEx+0x1b
f65774d8 806043d6 80604418 820f2020 820f2194 nt!PspCatchCriticalBreak+0x75
f6577508 f664a95e 820f2268 c0000006 f6577604 nt!NtTerminateProcess+0x7d
WARNING: Stack unwind information not available. Following frames may be wrong.
f6577584 804e46a7 badb0d00 f65775fc 0118002e klif+0x1d95e
f65775f4 80521fdc ffffffff c0000006 f65779f8 nt!ZwTerminateProcess+0x11
f65779b0 805053e0 f65779d8 00000000 f6577d64 nt!KiDispatchException+0x3a0
f6577d34 804e12a8 00c7fbe8 00c7fc08 00000000 nt!KiRaiseException+0x175
f6577d50 804dd99f 00c7fbe8 00c7fc08 00000000 nt!NtRaiseException+0x33
f6577d50 7723b399 00c7fbe8 00c7fc08 00000000 nt!KiFastCallEntry+0xfc
00c7fff4 00000000 00000000 00000000 00000000 0x7723b399


FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_csrss.exe

BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_csrss.exe

Followup: MachineOwner
---------

eax=f87d713c ebx=820f2020 ecx=00000000 edx=00000000 esi=820f2020 edi=81e41da8
eip=8053738a esp=f657749c ebp=f65774b4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8053738a 5d pop ebp
ChildEBP RetAddr Args to Child
f65774b4 80633f6d 000000f4 00000003 820f2020 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f65774d8 806043d6 80604418 820f2020 820f2194 nt!PspCatchCriticalBreak+0x75 (FPO: [Non-Fpo])
f6577508 f664a95e 820f2268 c0000006 f6577604 nt!NtTerminateProcess+0x7d (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f6577584 804e46a7 badb0d00 f65775fc 0118002e klif+0x1d95e
f65775f4 80521fdc ffffffff c0000006 f65779f8 nt!ZwTerminateProcess+0x11 (FPO: [2,0,0])
f65779b0 805053e0 f65779d8 00000000 f6577d64 nt!KiDispatchException+0x3a0 (FPO: [Non-Fpo])
f6577d34 804e12a8 00c7fbe8 00c7fc08 00000000 nt!KiRaiseException+0x175 (FPO: [Non-Fpo])
f6577d50 804dd99f 00c7fbe8 00c7fc08 00000000 nt!NtRaiseException+0x33
f6577d50 7723b399 00c7fbe8 00c7fc08 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f6577d64)
00c7fff4 00000000 00000000 00000000 00000000 0x7723b399
start end module name
804d7000 806fd000 nt ntkrnlmp.exe Wed Feb 28 12:08:32 2007 (45E54690)
806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Fri Aug 27 03:53:56 2004 (412E8624)
bf800000 bf9c2100 win32k win32k.sys Thu Mar 08 16:47:34 2007 (45F013F6)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Fri Aug 27 03:53:49 2004 (412E861D)
f414b000 f414e800 asyncmac asyncmac.sys Wed Aug 04 09:05:02 2004 (41107C8E)
f4277000 f42b7280 HTTP HTTP.sys Fri Mar 17 03:33:09 2006 (441A03C5)
f4678000 f46c9480 srv srv.sys Mon Aug 14 13:34:39 2006 (44E051BF)
f485a000 f4886400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
f4a3f000 f4a53400 wdmaud wdmaud.sys Wed Jun 14 12:00:44 2006 (448FD03C)
f53bc000 f53cad80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
f5484000 f5499580 irda irda.sys Wed Aug 04 09:00:50 2004 (41107B92)
f5502000 f5505280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
f65a8000 f65bf480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f65c0000 f65c1000 SPCA561 SPCA561.SYS unavailable (00000000)
f662d000 f666b000 klif klif.sys Wed Jun 27 16:31:57 2007 (468266CD)
f666b000 f66d9a00 mrxsmb mrxsmb.sys Fri May 05 12:41:42 2006 (445B1DD6)
f66da000 f6704a00 rdbss rdbss.sys Fri May 05 12:47:55 2006 (445B1F4B)
f672d000 f674ed00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
f674f000 f6776c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f6777000 f6797f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
f6798000 f67efd80 tcpip tcpip.sys Thu Apr 20 14:51:47 2006 (444775D3)
f67f0000 f6802400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f6823000 f6825900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
f796f000 f7971440 FileDisk FileDisk.SYS Thu Jan 19 01:30:00 2006 (43CEC168)
f7973000 f79cbe80 update update.sys Mon Apr 23 13:32:54 2007 (462C8B56)
f79cc000 f79fc100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
f7b9e000 f7baee00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
f7c3f000 f7c4e900 Cdfs Cdfs.SYS Wed Aug 04 09:14:09 2004 (41107EB1)
f7c4f000 f7c65680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
f7c66000 f7c79800 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
f7ca2000 f7cc5980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
f7cc6000 f808ddc0 ALCXWDM ALCXWDM.SYS Fri Apr 21 06:16:37 2006 (44484E95)
f808e000 f80b0e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
f80b1000 f80d3680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f80d4000 f80e7780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
f80e8000 f82b73c0 nv4_mini nv4_mini.sys Thu Apr 08 05:30:48 2004 (4074B958)
f82b8000 f82bac00 irenum irenum.sys Wed Aug 04 09:00:45 2004 (41107B8D)
f82bc000 f82bfc80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
f82f8000 f82fa280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
f8328000 f8344000 kl1 kl1.sys Sat Apr 28 15:50:13 2007 (46334305)
f8344000 f835e580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f835f000 f838ba80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f838c000 f8418400 Ntfs Ntfs.sys Fri Feb 09 14:10:31 2007 (45CC56A7)
f8419000 f842f780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
f8430000 f8441e80 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
f8442000 f8443000 fltMgr fltMgr.sys unavailable (00000000)
f8462000 f8479480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f847a000 f8491800 SCSIPORT SCSIPORT.SYS Wed Aug 04 08:59:39 2004 (41107B4B)
f8492000 f84b7780 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
f84b8000 f84d6880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
f84d7000 f84e7780 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
f84e8000 f8515b80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
f8537000 f853fc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
f8547000 f8551500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
f8557000 f8563c00 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
f8567000 f856fe00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
f8577000 f8583200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
f8587000 f858fb80 PxHelp20 PxHelp20.sys Sat Feb 03 00:23:57 2007 (45C3ABED)
f8597000 f85a1e80 uagp35 uagp35.sys Wed Aug 04 09:07:43 2004 (41107D2F)
f85c7000 f85cf880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
f85e7000 f85f0b00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
f85f7000 f85f8000 cxvcap cxvcap.sys unavailable (00000000)
f8607000 f8612e00 STREAM STREAM.SYS Wed Aug 04 09:07:58 2004 (41107D3E)
f8617000 f8621380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
f8627000 f8633180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
f8637000 f8644e80 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
f8657000 f8665b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
f8667000 f8676900 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
f8677000 f8683800 i8042prt i8042prt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f8687000 f8693880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
f8697000 f86a1200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
f86a7000 f86b2d00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
f86b7000 f86bf900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
f86c7000 f86d0f00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
f86d7000 f86e0480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
f86e7000 f86f5100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
f8787000 f878f700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
f8797000 f879f700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
f87b7000 f87bd200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
f87bf000 f87c3900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
f87c7000 f87ccf00 VClone VClone.sys Sat Apr 22 22:59:21 2006 (444A8B19)
f87cf000 f87d3880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
f889f000 f88a4200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
f88a7000 f88aba80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
f88af000 f88b6880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
f88b7000 f88be260 SCDEmu SCDEmu.SYS Mon Apr 09 15:27:07 2007 (461A311B)
f88bf000 f88c3580 ckldrv ckldrv.sys Tue Jan 10 05:47:26 2006 (43C3203E)
f88cf000 f88d3500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
f88df000 f88e6000 GEARAspiWDM GEARAspiWDM.sys Wed Feb 02 08:19:49 2005 (420062F5)
f88e7000 f88ec000 usbuhci usbuhci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f88ef000 f88f5800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f88f7000 f88fda00 fetnd5 fetnd5.sys Fri Jul 20 14:40:24 2001 (3B5818A8)
f88ff000 f8903900 irsir irsir.sys Fri Aug 17 23:51:28 2001 (3B7D83D0)
f8907000 f890c980 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f890f000 f8914f80 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f8917000 f891f000 klim5 klim5.sys Wed Apr 04 13:58:00 2007 (461384B8)
f891f000 f8923c80 rasirda rasirda.sys Fri Aug 17 23:51:29 2001 (3B7D83D1)
f892f000 f8933580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
f8937000 f893b080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
f893f000 f8940000 CXTUNER CXTUNER.sys unavailable (00000000)
f8947000 f894a000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
f89f3000 f89f5580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
f8a0f000 f8a12c80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
f8a2b000 f8a2c000 CXXBAR CXXBAR.sys unavailable (00000000)
f8a37000 f8a38b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
f8a39000 f8a3a100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8a3b000 f8a3c500 viaide viaide.sys Wed Aug 04 08:59:42 2004 (41107B4E)
f8a3d000 f8a3e000 dmload dmload.sys unavailable (00000000)
f8a77000 f8a78000 ParVdm ParVdm.SYS unavailable (00000000)
f8a7b000 f8a7c200 ElbyDelay ElbyDelay.sys Tue Apr 12 11:41:20 2005 (425B89B0)
f8a7d000 f8a7e100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
f8a85000 f8a86280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
f8aa3000 f8aa4f80 ElbyCDIO ElbyCDIO.sys Sat Apr 22 04:44:39 2006 (44498A87)
f8aed000 f8aeef00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
f8aef000 f8af0080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
f8af1000 f8af2080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
f8af3000 f8af4080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
f8af9000 f8afa100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8aff000 f8affd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
f8b26000 f8b26a00 mchInjDrv mchInjDrv.sys Wed Jan 11 10:07:52 2006 (43C4AEC8)
f8c2f000 f8c2fc00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
f8c47000 f8c47d00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
f8c65000 f8c66000 Null Null.SYS unavailable (00000000)

Unloaded modules:
eff95000 effc0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ac5000 f8ac7000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0796000 f07c1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f11c3000 f11ee000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f128e000 f12b9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f1679000 f16a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f1716000 f1741000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8aa9000 f8aab000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4044000 f406f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bed000 f8bee000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4520000 f452d000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4792000 f47a0000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8a93000 f8a95000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8897000 f889c000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f82fc000 f82ff000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f888f000 f8894000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8887000 f888e000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
1: kd> .logclose
Closing open log file c:\debuglog.txt


thanks a lot

P.S.
do u need software/hardware description of my system?
if so let me know but in short its
xp pro sp2 HEB
and the hardware
P-4 3.0 ht
motherboard - p4m800-m
512 ram

 

Hi, jinji. Welcome to Windows BBS!

I'm not an expert but I try to help when I can.

It might be helpful for us to know some more details.

1. What does "HEB" mean? (Is usually best to spell things out to eliminate confusion.)
2. How old is this computer?
3. When did your crashes start occurring?
4. How often do these crashes occur?
5. Have you noticed any patterns about when crashes occur (such as when performing certain tasks) or do they seem random?
6. Have you made any hardware/software changes/updates (that you can recall) just prior to the time your crashes started occurring?
7. What have you already done to try to fix the problem?

Please keep this questions in mind any time you have crash issues and seek assistance.

==========
Problem Resolution Suggestions:

Both of your posted dump logs are for STOP 0xF4 errors with first parameter 0x03.

• If a hard drive was installed (or hands have been inside the computer case for any reason) just prior to your crashes, then have a look at this Microsoft KB article.

If this Microsoft KB article appears it might apply to you and if you have installed a PATA (IDE) hard drive, then I have another suggestion in mind (which Microsoft does not explicitly state in their KB article) that might be worth pursuing.

Here's hoping I hit the nail on the head again! (fingers crossed)

 

well details...

1. HEB mean Hebrew version of the xp (like ENG mean English)

2.computer 2 years old but belong to a family that take turns 24/6
so it dosent get much rest

3.crush start occurring about 4-5 days ago

4. they heppend a few time per day

5.a)no pattern that i can put my finger on, seems random
b)if the number of the errors changes do i need to keep track?

6.we mess with it alot so its very hard to recallthe last software install
a lot mean at least 10 installation/uninstallation per day (big messy family)

7.i tried: chekdsk - no errors
memtest - if i understud it correctlly there were no errors to

i wanna know if its hardware or software cuase if its software i can always re-install the windows after format but i wont like to do it (installing photoshop , office and all the rest can realy get on my nerve's)

i am gonna read now both article including that u suggested

and my big Q is how do i know if its over? thats actually y i try to find te exect problem


and most of all thanks for your time

 

Thanks! I was wondering if it meant "Home Edition (something) ".

Now might be a good time to open the computer case (while the computer is OFF) and do some cleaning. I suggest you use some canned compressed air and blow the dust out from between the CPU's heat sink fins. (Do NOT remove the heat sink from the CPU.) Also clean the dust from the CPU fan and case fans. If you use compressed air, place a finger between the fan blades to prevent the fan from spinning. Otherwise, use a soft artist's paint brush (or something similar) to gently clean the fan blades.

If the troubleshooting steps linked in my post above do not solve your problem, then perhaps you can use System Restore to restore your computer to the state it was in before the crashes started occurring.
Start > All Programs > Accessories > System Tools > System Restore

If you keep track, that might be helpful for determining any pattern that might appear.

Thanks for that information. Saves us from wasting time suggesting things you have already tried.

I understand. We will reserve the re-install idea as a last resort.

If you have more crashes, it might be helpful to post a couple more dump logs.

I am hopefully-optimistic the information in those two links will solve your problem, especially if you have installed a hard drive or moved/bumped cables around inside the case.

The only way to know if the crashes are over is to wait and see of the computer runs for several days in a row and does not crash with normal computer use (without making additional software/hardware installations). I don't know of any other way to determine whether the problem is solved or what caused the problem.

You are very welcome!

Good luck!

 

Jinji

Is your computer running any Kaspersky Security products (or previously installed / removed, but left remnants )??

This driver has been haunting Kaspersky with a myriad of issues .. does not play nice with itself, others, and is subjected to exploitation.
If you are, may want to take a look at current updates from Kaspersky ... unfortunately this has been an ongoing problem.

 

Your PC is crashed with NT Status code c000009a and it stands for insufficient resouce. Probably the problem is related to software error of device driver. If you search google with keyword c000009a, it will give you a lot of hints. Do you install any new software recently? If yes, de-install the software.

I will suggest to re-allocate the paging space and run chkdsk /r. If BSOD still occurs, re-install windows.

 

WELL i am i change from kaspersky 6 to 7 about a week a go there might be somthing in it but unfortunally i aint home 4 the weekend so i'll check it by sunday

can u give me more details?
did uninstallation will solve it?
thanks any way

 

Hi, jinji.

Since Dennis identified klif.sys as a possibile cause, I would try uninstalling Kaspersky and using a different product for a period a period of time which performs similar protection.

For example, if your Kaspersky product is Kaspersky Anti-Virus (KAV), then uninstall KAV, reboot, and then install another reputable anti-virus (such as AVG Anti-Virus) and reboot again.

If your crashes stop occurring, then you have narrowed down the cause of the crashes to KAV (or at least some component of KAV).

===========

cpc2004 is considered around here to be an expert regarding analysis of crash dump logs. Therefore, I also suggest investigating anything he identifies as a possible cause.

Good luck!


EDIT: peterdiva also appears to be quite familiar with BSOD dump log analysis. Perhaps (s)he will offer some suggestions.

 

As stated in thread, very few of us have expert skills in reading .DMP files. Not sure how many BSOD's you experienced, but we generally look for patterns from 3 to 6. As for Kaspersky / klif.sys, this has been an been an ongoing problem.
My current suggestion ... search klif.sys specific to version of Kaspersky you are running, and/or update to current release. You could also browse this klif.sys search from Kaspersky forums. Until you/we/us get more information, I would refrain from uninstalling immediately, unless you are comfortable with it. If you are running suite, they have a history of being hooked very deep and may require additional steps after ADD/REMOVE process.

 

i did chkdsk /r
and i think i re-allocated the paging space by selecting - dont use page space reboot and than re-define it.

it looks like chkdsk fix somethings but the problem happend at list once more

then i saw

so i updated kaspersky (by the internal update not version update)

the computer is runing for 2 hours now i'll keep it alive for a few days and if it will crush again i'll post

meanwhile i am backing up everything for possible xp re-installation

thanks a lot for all off you guys

i'll let u know as soon as another crush happend or in a week if it dosn't

******
P.S. sorry about my english it not my native (as u can see from my xp version)
wish me & my computer luck as i wishes for u
c u

 

apperantlly i was happy to soon

it took it a while but it crush again after 16 hours

here is the mini dump

and i think i'll install xp from the begining

Opened log file 'c:\debuglog.txt'
1: kd> .reload;!analyze -v;r;kv;lmnt;.logclose
Loading Kernel Symbols
.................................................................................................................................
Loading unloaded module list
..................................................
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 81f54458, Terminating object
Arg3: 81f545cc, Process image file name
Arg4: 80604418, Explanatory message (ascii)

Debugging Details:
------------------

Unable to load image klif.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys

PROCESS_OBJECT: 81f54458

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000

EXCEPTION_RECORD: f7c3e9d8 -- (.exr fffffffff7c3e9d8)
.exr fffffffff7c3e9d8
ExceptionAddress: 7723b399
ExceptionCode: c0000006 (In-page I/O error)
ExceptionFlags: 00000000
NumberParameters: 3
Parameter[0]: 00000000
Parameter[1]: 7723b399
Parameter[2]: c000009a
Inpage operation failed at 7723b399, due to I/O error c000009a

EXCEPTION_CODE: (NTSTATUS) 0xc000009a - <Unable to get error code text>

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: csrss.exe

ERROR_CODE: (NTSTATUS) 0xc0000006 - <Unable to get error code text>

IO_ERROR: (NTSTATUS) 0xc000009a - <Unable to get error code text>

EXCEPTION_STR: 0xc0000006_c000009a

BUGCHECK_STR: 0xF4_IOERR_C000009A

STACK_TEXT:
f7c3e4b4 80633f6d 000000f4 00000003 81f54458 nt!KeBugCheckEx+0x1b
f7c3e4d8 806043d6 80604418 81f54458 81f545cc nt!PspCatchCriticalBreak+0x75
f7c3e508 f664a95e 81f546a0 c0000006 f7c3e604 nt!NtTerminateProcess+0x7d
WARNING: Stack unwind information not available. Following frames may be wrong.
f7c3e584 804e46a7 badb0d00 f7c3e5fc 0118002e klif+0x1d95e
f7c3e5f4 80521fdc ffffffff c0000006 f7c3e9f8 nt!ZwTerminateProcess+0x11
f7c3e9b0 805053e0 f7c3e9d8 00000000 f7c3ed64 nt!KiDispatchException+0x3a0
f7c3ed34 804e12a8 00c7fbe8 00c7fc08 00000000 nt!KiRaiseException+0x175
f7c3ed50 804dd99f 00c7fbe8 00c7fc08 00000000 nt!NtRaiseException+0x33
f7c3ed50 7723b399 00c7fbe8 00c7fc08 00000000 nt!KiFastCallEntry+0xfc
00c7fff4 00000000 00000000 00000000 00000000 0x7723b399


FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_csrss.exe

BUCKET_ID: 0xF4_IOERR_C000009A_IMAGE_csrss.exe

Followup: MachineOwner
---------

eax=f87d713c ebx=81f54458 ecx=00000000 edx=00000000 esi=81f54458 edi=81ee92c0
eip=8053738a esp=f7c3e49c ebp=f7c3e4b4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8053738a 5d pop ebp
ChildEBP RetAddr Args to Child
f7c3e4b4 80633f6d 000000f4 00000003 81f54458 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f7c3e4d8 806043d6 80604418 81f54458 81f545cc nt!PspCatchCriticalBreak+0x75 (FPO: [Non-Fpo])
f7c3e508 f664a95e 81f546a0 c0000006 f7c3e604 nt!NtTerminateProcess+0x7d (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f7c3e584 804e46a7 badb0d00 f7c3e5fc 0118002e klif+0x1d95e
f7c3e5f4 80521fdc ffffffff c0000006 f7c3e9f8 nt!ZwTerminateProcess+0x11 (FPO: [2,0,0])
f7c3e9b0 805053e0 f7c3e9d8 00000000 f7c3ed64 nt!KiDispatchException+0x3a0 (FPO: [Non-Fpo])
f7c3ed34 804e12a8 00c7fbe8 00c7fc08 00000000 nt!KiRaiseException+0x175 (FPO: [Non-Fpo])
f7c3ed50 804dd99f 00c7fbe8 00c7fc08 00000000 nt!NtRaiseException+0x33
f7c3ed50 7723b399 00c7fbe8 00c7fc08 00000000 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f7c3ed64)
00c7fff4 00000000 00000000 00000000 00000000 0x7723b399
start end module name
804d7000 806fd000 nt ntkrnlmp.exe Wed Feb 28 12:08:32 2007 (45E54690)
806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 08:59:09 2004 (41107B2D)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Fri Aug 27 03:53:56 2004 (412E8624)
bf800000 bf9c2100 win32k win32k.sys Thu Mar 08 16:47:34 2007 (45F013F6)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Fri Aug 27 03:53:49 2004 (412E861D)
eb8bc000 eb8e6180 kmixer kmixer.sys Wed Jun 14 11:47:45 2006 (448FCD31)
eb8e7000 eb90a000 Fastfat Fastfat.SYS Wed Aug 04 09:14:15 2004 (41107EB7)
efdca000 efe05000 vmm vmm.sys Sun Feb 18 11:10:42 2007 (45D80A02)
f08d2000 f08e2280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
f1930000 f193f000 VMNetSrv VMNetSrv.sys Wed Jan 24 15:05:29 2007 (45B74B89)
f4227000 f4267280 HTTP HTTP.sys Fri Mar 17 03:33:09 2006 (441A03C5)
f45a4000 f45a7800 asyncmac asyncmac.sys Wed Aug 04 09:05:02 2004 (41107C8E)
f4858000 f48a9480 srv srv.sys Mon Aug 14 13:34:39 2006 (44E051BF)
f49c2000 f49d6400 wdmaud wdmaud.sys Wed Jun 14 12:00:44 2006 (448FD03C)
f49ff000 f4a2b400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
f5434000 f5449580 irda irda.sys Wed Aug 04 09:00:50 2004 (41107B92)
f546e000 f5471280 ndisuio ndisuio.sys Wed Aug 04 09:03:10 2004 (41107C1E)
f558a000 f5598d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
f65a8000 f65bf480 dump_atapi dump_atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f65c0000 f65c1000 SPCA561 SPCA561.SYS unavailable (00000000)
f662d000 f666b000 klif klif.sys Wed Jun 27 16:31:57 2007 (468266CD)
f666b000 f66d9a00 mrxsmb mrxsmb.sys Fri May 05 12:41:42 2006 (445B1DD6)
f66da000 f6704a00 rdbss rdbss.sys Fri May 05 12:47:55 2006 (445B1F4B)
f672d000 f674ed00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
f674f000 f676ff00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
f6770000 f6797c00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f6798000 f67efd80 tcpip tcpip.sys Thu Apr 20 14:51:47 2006 (444775D3)
f67f0000 f6802400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f6827000 f6829900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
f794f000 f7951280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
f7973000 f79cbe80 update update.sys Mon Apr 23 13:32:54 2007 (462C8B56)
f7b6d000 f7b9d100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
f7b9e000 f7baee00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
f7c4f000 f7c65680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
f7c66000 f7c79800 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
f7c96000 f7c98440 FileDisk FileDisk.SYS Thu Jan 19 01:30:00 2006 (43CEC168)
f7ca2000 f7cc5980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
f7cc6000 f808ddc0 ALCXWDM ALCXWDM.SYS Fri Apr 21 06:16:37 2006 (44484E95)
f808e000 f80b0e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
f80b1000 f80d3680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f80d4000 f80e7780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
f80e8000 f82b73c0 nv4_mini nv4_mini.sys Thu Apr 08 05:30:48 2004 (4074B958)
f82b8000 f82bbc80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
f82d0000 f82d2580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
f82dc000 f82dec00 irenum irenum.sys Wed Aug 04 09:00:45 2004 (41107B8D)
f82e0000 f82e3c80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
f8328000 f8344000 kl1 kl1.sys Sat Apr 28 15:50:13 2007 (46334305)
f8344000 f835e580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f835f000 f838ba80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f838c000 f8418400 Ntfs Ntfs.sys Fri Feb 09 14:10:31 2007 (45CC56A7)
f8419000 f842f780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
f8430000 f8441e80 sr sr.sys Wed Aug 04 09:06:22 2004 (41107CDE)
f8442000 f8443000 fltMgr fltMgr.sys unavailable (00000000)
f8462000 f8479480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f847a000 f8491800 SCSIPORT SCSIPORT.SYS Wed Aug 04 08:59:39 2004 (41107B4B)
f8492000 f84b7780 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
f84b8000 f84d6880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
f84d7000 f84e7780 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
f84e8000 f8515b80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
f8537000 f853fc00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
f8547000 f8551500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
f8557000 f8563c00 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
f8567000 f856fe00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
f8577000 f8583200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
f8587000 f858fb80 PxHelp20 PxHelp20.sys Sat Feb 03 00:23:57 2007 (45C3ABED)
f8597000 f85a1e80 uagp35 uagp35.sys Wed Aug 04 09:07:43 2004 (41107D2F)
f85c7000 f85d0b00 intelppm intelppm.sys Wed Aug 04 08:59:19 2004 (41107B37)
f85d7000 f85d8000 cxvcap cxvcap.sys unavailable (00000000)
f85e7000 f85f2e00 STREAM STREAM.SYS Wed Aug 04 09:07:58 2004 (41107D3E)
f85f7000 f8601380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
f8607000 f8613180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
f8617000 f8624e80 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
f8627000 f8635b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
f8637000 f8646900 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
f8647000 f8653800 i8042prt i8042prt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f8657000 f8663880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
f8667000 f8671200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
f8677000 f8682d00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
f8687000 f868f900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
f8697000 f86a0f00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
f86a7000 f86b0480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
f86b7000 f86c5100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
f8747000 f874f700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
f8757000 f875f700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
f8777000 f877f880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
f8797000 f87a6900 Cdfs Cdfs.SYS Wed Aug 04 09:14:09 2004 (41107EB1)
f87b7000 f87bd200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
f87bf000 f87c3900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
f87c7000 f87ccf00 VClone VClone.sys Sat Apr 22 22:59:21 2006 (444A8B19)
f87cf000 f87d3880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
f886f000 f8874200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
f8877000 f887ba80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
f887f000 f8886880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
f8887000 f888e260 SCDEmu SCDEmu.SYS Mon Apr 09 15:27:07 2007 (461A311B)
f888f000 f8893580 ckldrv ckldrv.sys Tue Jan 10 05:47:26 2006 (43C3203E)
f88af000 f88b3500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
f88d7000 f88de000 GEARAspiWDM GEARAspiWDM.sys Wed Feb 02 08:19:49 2005 (420062F5)
f88df000 f88e4000 usbuhci usbuhci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f88e7000 f88ed800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f88ef000 f88f5a00 fetnd5 fetnd5.sys Fri Jul 20 14:40:24 2001 (3B5818A8)
f88f7000 f88fb900 irsir irsir.sys Fri Aug 17 23:51:28 2001 (3B7D83D0)
f88ff000 f8904980 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f8907000 f890cf80 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f890f000 f8917000 klim5 klim5.sys Wed Apr 04 13:58:00 2007 (461384B8)
f8917000 f891bc80 rasirda rasirda.sys Fri Aug 17 23:51:29 2001 (3B7D83D1)
f891f000 f8923580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
f8927000 f892b080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
f892f000 f8930000 CXTUNER CXTUNER.sys unavailable (00000000)
f8947000 f894a000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
f89ff000 f8a00000 CXXBAR CXXBAR.sys unavailable (00000000)
f8a37000 f8a38b80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
f8a39000 f8a3a100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8a3b000 f8a3c500 viaide viaide.sys Wed Aug 04 08:59:42 2004 (41107B4E)
f8a3d000 f8a3e000 dmload dmload.sys unavailable (00000000)
f8a51000 f8a52f80 ElbyCDIO ElbyCDIO.sys Sat Apr 22 04:44:39 2006 (44498A87)
f8a71000 f8a72200 ElbyDelay ElbyDelay.sys Tue Apr 12 11:41:20 2005 (425B89B0)
f8a73000 f8a74100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
f8a7f000 f8a80280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
f8add000 f8ade000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
f8adf000 f8ae0080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
f8ae1000 f8ae2080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
f8ae3000 f8ae4080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
f8aeb000 f8aec100 dump_WMILIB dump_WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8afb000 f8afc000 ParVdm ParVdm.SYS unavailable (00000000)
f8aff000 f8affd00 pciide pciide.sys Fri Aug 17 23:51:49 2001 (3B7D83E5)
f8b4b000 f8b4ba00 mchInjDrv mchInjDrv.sys Wed Jan 11 10:07:52 2006 (43C4AEC8)
f8b6e000 f8b6ec00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
f8beb000 f8bebd00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
f8c6b000 f8c6c000 Null Null.SYS unavailable (00000000)

Unloaded modules:
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8827000 f882e000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8bc000 eb8e7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f54a2000 f54a9000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb92c000 eb957000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f54ba000 f54c1000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f547a000 f5481000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb92c000 eb957000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb92c000 eb957000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ebe1b000 ebe46000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed251000 ed27c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed6a4000 ed6cf000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed6a4000 ed6cf000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed6a4000 ed6cf000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed6a4000 ed6cf000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed679000 ed6a4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
edea5000 eded0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eeb9b000 eebc6000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef433000 ef45e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eba10000 eba3b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ebccc000 ebcf7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ec789000 ec7b4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ec9b5000 ec9e0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed1e1000 ed20c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee431000 ee45c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
efd9f000 efdca000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f05db000 f0606000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f06a6000 f06d1000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ac1000 f8ac3000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f08a7000 f08d2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f10e4000 f110f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2991000 f29bc000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3192000 f31bd000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3192000 f31bd000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3ff4000 f401f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8b78000 f8b79000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

From your latest dump and the first dump, klif.sys is the same version.
f662d000 f666b000 klif klif.sys Wed Jun 27 16:31:57 2007 (468266CD)

 

Before considering the drastic action of reinstalling Windows, I would do the following.

1. While holding down the Windows key, press the Pause/Break key.
   This will open the "System Properties" window.
2. Click the Advanced tab.
3. In the "Performance" section, click the Settings button.
   This will open the "Performance Options" window.
4. Click the Advanced tab.
   This will open the "Virtual Memory" window.
5. Click your C:\ drive (if necessary) so it is highlighted.
6. Select "Custom size:" radio button and set as follows:
   • Initial size (MB): 2048
   • Maximum size (MB): 2048
7. Click the Set button.
8. Click the OK button. (Keep OKing your way out.)
9. When you're back to the main Desktop screen, restart your computer.

These settings should set your Paging File to a static size of 2 GB (which is 4 times the size of your 512MB RAM).

Perhaps that will solve your "EXCEPTION_CODE: (NTSTATUS) 0xc000009a" BOSD problem as cpc2004 suspects. (BTW, cpc2004 is an expert at analyzing BSOD dump logs.)

 

I see cpc2004 snuck in a reply while I was composing my message above.

He apparently suspects Kaspersky's klif.sys as the possible culprit. I would suggest either ugrading Kaspersky or otherwise focusing on the klif.sys driver as Dennis L suggested (or even uninstalling Kaspersky if Dennis L's suggestion does not help).

 

Possible a simpler way to test ...
Many security programs are launched through XP services.
First close all browsers, and open XP services.
Look for any processes with "Kaspersky" under the Name or Description column. Once located, first "Stop" the process, then select "Disable" (please write down process name(s) for future reference). Close Service views and Enable XP's built in Anti-Virus.
Reboot computer.
With luck, Kaspersky will not auto-load at start.
Most programs behave and will not leave any residue lurking around. Unfortunately, if Kaspersky roots as deep as program such as Zone Alarm, even removal can let problems continue. Lets hope Kaspersky is more discipline.
Run the computer as normal and lets hope for the best.
If problem stops, we can then consider removal. If problem continues, and KLIF.SYS is NOT in Memory.dmp, then we put Kaspersky lower on the list, but their is still a chance.
Gee, aren't computers fun!!??

ANY POSTERS
If you know of any/all of Kaspersky services, please post them for jinji . Would make his search much easier.
Also, is anyone aware of program(s) Kaspersky launches via registry?
Thanks.

Later Edit - Update
Not sure of how close the relationship is but may want to look for "GFI" services. Write then down and post back. Kaspersky and GFI have a relationship, but I don't know how / may do it from a program / services value.

 

[update Status]

first i wanted to thank u all for your time

after a few testing disabling and uninstalling i decided to format and re-install the windows

apperantly it is defeniatly an hardware program since it dosent let me to install any version of xp i try it just keep turning the computer off just as the screen to choose repair/install / hard drive [the first screen that u have an input option] or a second befor

so i took my SATA to some guy i know and try to install it there to make sure its not the drive and it work perfectlly

i tried to remove i stick of memory and install
and then i switched to the other one and install with no luck

tried to install with the gforce out and using the on board screen
tried to install on an IDE
my coclusion was it some part of the motherboard
so...
i tried and to install win98 on IDE so i'll get acsess to the net and it made my computer turn off once in the middle of the installation but when i turend it back on the installation continu and its working

ofcourse i cant get acsess to my NTFS SATA but i can work my way around it [i actualy did one time but then i tried to upgrade to xp FROM win98 but it shut down again in the process]

at list i was smart enugh to save ghost image of the win98 on a secondery partition so i want have to go thrugh the whole process over and over again

but i wasent smart enugh to save image of the xp

well i wanna back my xp
so i need some help on how to it by copy the files into the drive before i install i can do it right? install without the cd inside?

and then if thats dont work
shrink the installation to minimum drivers require to run the installation and let him ask me for ech and every driver manuely (of the files that he copy before the installation actually begin) so i'll know wich part is damage in the MB

i know this is the time everyone will send me to the store to by a new one but this one is personal i am gonna find the exect part who is corrupt and find a way to install xp and tell him to avoid using that part and then i might buy a new computer while this one will stay for my famlly to mess with

but i'll need some help

how to install xp stright from the hard drive?

i have a boot cd so i just need to know
1.what to copy and how to start the installation
and then i'll need to know
2.how to shrink it from the 98 so it wont have the last drivers/files he load before the installation just before he crush

any way it ***** but its a gr8 chaleng

P.S sorry about my english but this is the best i can do without any spellcheck