Resolved BSOD - hpt374.sys

When I first turn on the computer I usually get the BSOD within 10min. After I reboot the computer it seems to run fine for the rest of the day, but not always. The BSOD seems to be happening at random times. Whenever I try to run a scan with avast! Antivirus it BSOD immediately. I have ran Spybot - Search & Destroy, Chkdsk - disk error checking, and Memtest86, all three have found nothing wrong. Here is what the error message says:

"DRIVER_IRQL_NOT_LESS_OR_EQUAL

Stop: 0X000000D1 (0X1FE6B000, 0X00000005, 0X00000000, 0XF848D04D)

hpt374.sys - Address F848D04D base at F8483000, Datestamp 3f29669 "

I have also done this - Dump Data collection tool and instructions
I went here for the .dmp file, not sure if its the correct .dmp file I'm supposed to use? - C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp
Here are the results:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Sun Apr 3 02:46:36.000 2011 (UTC - 7:00)
System Uptime: not available
Process Uptime: 0 days 5:44:54.000
................................................................
...........
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(ee4.ef4): Access violation - code c0000005 (first/second chance not available)
eax=0000001c ebx=0070a808 ecx=7ffdc000 edx=0000001c esi=00730280 edi=00000000
eip=7c90100b esp=00eafd68 ebp=00eafdac iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00040202
ntdll!RtlEnterCriticalSection+0xb:
7c90100b 837a1400 cmp dword ptr [edx+14h],0 ds:0023:00000030=????????
0:001> !analyze -v;r;kv;lmtn;.logclose;q
*** WARNING: Unable to verify timestamp for nspr4.dll
*** ERROR: Module load completed but symbols could not be loaded for nspr4.dll
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** WARNING: Unable to verify timestamp for xul.dll
*** ERROR: Module load completed but symbols could not be loaded for xul.dll
*** WARNING: Unable to verify timestamp for plugin-container.exe
*** ERROR: Module load completed but symbols could not be loaded for plugin-container.exe
Unable to load image C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NPSWF32.dll
*** ERROR: Module load completed but symbols could not be loaded for NPSWF32.dll

FAULTING_IP:
ntdll!RtlEnterCriticalSection+b
7c90100b 837a1400 cmp dword ptr [edx+14h],0

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
.exr 0xffffffffffffffff
ExceptionAddress: 7c90100b (ntdll!RtlEnterCriticalSection+0x0000000b)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000030
Attempt to read from address 00000030

PROCESS_NAME: plugin-container.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 00000030

READ_ADDRESS: 00000030

FOLLOWUP_IP:
nspr4+1b3c7
0033b3c7 ?? ???

MOD_LIST: <ANALYSIS/>

FAULTING_THREAD: 00000ef4

BUGCHECK_STR: APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_READ

PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_DEREFERENCE

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER: from 0033b3c7 to 7c90100b

STACK_TEXT:
00eafd64 0033b3c7 0000001c 04305190 00eafd9c ntdll!RtlEnterCriticalSection+0xb
WARNING: Stack unwind information not available. Following frames may be wrong.
00eafdac 107233c9 04305190 00eafee0 1023ca47 nspr4+0x1b3c7
00eafe08 105f81e6 007133e0 00000000 007133c0 xul+0x7233c9
00eafe38 10237c42 00eafee0 10714c80 00eafee0 xul+0x5f81e6
00eafe8c 1022bbf8 487b4154 7c80a0b7 00702808 xul+0x237c42
00eafec4 1022bb94 487b4140 00000000 007129d0 xul+0x22bbf8
00eaffb0 1023fc79 7c80b729 00702808 00000000 xul+0x22bb94
00eaffec 00000000 1023fc70 00702808 00000000 xul+0x23fc79


STACK_COMMAND: ~1s; .ecxr ; kb

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nspr4+1b3c7

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nspr4

IMAGE_NAME: nspr4.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4d8519fc

FAILURE_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE_c0000005_nspr4.dll!Unknown

BUCKET_ID: APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_READ_nspr4+1b3c7

Followup: MachineOwner
---------

eax=0000001c ebx=0070a808 ecx=7ffdc000 edx=0000001c esi=00730280 edi=00000000
eip=7c90100b esp=00eafd68 ebp=00eafdac iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00040202
ntdll!RtlEnterCriticalSection+0xb:
7c90100b 837a1400 cmp dword ptr [edx+14h],0 ds:0023:00000030=????????
ChildEBP RetAddr Args to Child
00eafd64 0033b3c7 0000001c 04305190 00eafd9c ntdll!RtlEnterCriticalSection+0xb (FPO: [1,0,0])
WARNING: Stack unwind information not available. Following frames may be wrong.
00eafdac 107233c9 04305190 00eafee0 1023ca47 nspr4+0x1b3c7
00eafe08 105f81e6 007133e0 00000000 007133c0 xul+0x7233c9
00eafe38 10237c42 00eafee0 10714c80 00eafee0 xul+0x5f81e6
00eafe8c 1022bbf8 487b4154 7c80a0b7 00702808 xul+0x237c42
00eafec4 1022bb94 487b4140 00000000 007129d0 xul+0x22bbf8
00eaffb0 1023fc79 7c80b729 00702808 00000000 xul+0x22bb94
00eaffec 00000000 1023fc70 00702808 00000000 xul+0x23fc79
start end module name
002a0000 0031b000 sqlite3 sqlite3.dll Sat Mar 19 14:11:35 2011 (4D851C07)
00320000 00351000 nspr4 nspr4.dll Sat Mar 19 14:02:52 2011 (4D8519FC)
00360000 00378000 smime3 smime3.dll Sat Mar 19 14:30:34 2011 (4D85207A)
00380000 00394000 nssutil3 nssutil3.dll Sat Mar 19 14:29:30 2011 (4D85203A)
003a0000 003a7000 plc4 plc4.dll Sat Mar 19 14:02:55 2011 (4D8519FF)
003b0000 003b7000 plds4 plds4.dll Sat Mar 19 14:02:53 2011 (4D8519FD)
003c0000 003e1000 ssl3 ssl3.dll Sat Mar 19 14:30:28 2011 (4D852074)
00400000 00406000 plugin_container plugin-container.exe Sat Mar 19 15:21:22 2011 (4D852C62)
00410000 0050b000 js3250 js3250.dll Sat Mar 19 14:45:33 2011 (4D8523FD)
00510000 005ad000 nss3 nss3.dll Sat Mar 19 14:30:20 2011 (4D85206C)
00f00000 014e7000 NPSWF32 NPSWF32.dll Thu Mar 10 20:59:35 2011 (4D79AC37)
01500000 01509000 normaliz normaliz.dll Thu Jun 29 08:05:42 2006 (44A3EC46)
015b0000 016e3000 urlmon urlmon.dll Mon Dec 20 15:59:20 2010 (4D0FEDD8)
01890000 01897000 ctagent ctagent.dll Mon Apr 09 05:32:29 2007 (461A325D)
01b70000 01ba6000 nvapi nvapi.dll Sun Oct 22 15:27:11 2006 (453BF03F)
10000000 10b54000 xul xul.dll Sat Mar 19 15:20:05 2011 (4D852C15)
3d930000 3da16000 wininet wininet.dll Mon Dec 20 15:59:20 2010 (4D0FEDD8)
3dfd0000 3e1b9000 iertutil iertutil.dll Mon Dec 20 15:59:20 2010 (4D0FEDD8)
4fdd0000 4ff76000 d3d9 d3d9.dll Sun Apr 13 17:09:13 2008 (4802A0A9)
5ad70000 5ada8000 uxtheme uxtheme.dll Sun Apr 13 17:11:10 2008 (4802A11E)
5b860000 5b8b5000 netapi32 netapi32.dll Wed Oct 15 09:34:24 2008 (48F61B90)
629c0000 629c9000 lpk lpk.dll Sun Apr 13 17:10:13 2008 (4802A0E5)
64000000 64025000 mdnsNSP mdnsNSP.dll Thu Oct 07 12:15:34 2010 (4CAE1C56)
64d00000 64d33000 snxhk snxhk.dll Wed Feb 23 06:56:29 2011 (4D65201D)
662b0000 66308000 hnetcfg hnetcfg.dll Sun Apr 13 17:09:46 2008 (4802A0CA)
68000000 68036000 rsaenh rsaenh.dll Tue Mar 18 07:39:32 2008 (47DFD424)
6d990000 6d996000 d3d8thk d3d8thk.dll Sun Apr 13 17:09:12 2008 (4802A0A8)
71a50000 71a8f000 mswsock mswsock.dll Fri Jun 20 10:46:57 2008 (485BED11)
71a90000 71a98000 wshtcpip wshtcpip.dll Sun Apr 13 17:12:30 2008 (4802A16E)
71aa0000 71aa8000 ws2help ws2help.dll Sun Apr 13 17:12:20 2008 (4802A164)
71ab0000 71ac7000 ws2_32 ws2_32.dll Sun Apr 13 17:12:19 2008 (4802A163)
71ad0000 71ad9000 wsock32 wsock32.dll Sun Apr 13 17:12:32 2008 (4802A170)
72d10000 72d18000 msacm32 msacm32.drv Fri Aug 17 22:33:30 2001 (3B7DFE2A)
72d20000 72d29000 wdmaud wdmaud.drv Sun Apr 13 17:11:24 2008 (4802A12C)
73000000 73026000 winspool winspool.drv Sun Apr 13 17:11:19 2008 (4802A127)
73b30000 73b45000 mscms mscms.dll Tue Jun 24 09:43:16 2008 (48612424)
73f10000 73f6c000 dsound dsound.dll Sun Apr 13 17:10:30 2008 (4802A0F6)
74720000 7476c000 msctf msctf.dll Sun Apr 13 17:11:24 2008 (4802A12C)
74d90000 74dfb000 usp10 usp10.dll Fri Apr 16 08:36:56 2010 (4BC88418)
755c0000 755ee000 msctfime msctfime.ime Sun Apr 13 17:11:25 2008 (4802A12D)
75cf0000 75d81000 mlang mlang.dll Sun Apr 13 17:10:25 2008 (4802A0F1)
76380000 76385000 msimg32 msimg32.dll Sun Apr 13 17:12:15 2008 (4802A15F)
76390000 763ad000 imm32 imm32.dll Sun Apr 13 17:10:15 2008 (4802A0E7)
763b0000 763f9000 comdlg32 comdlg32.dll Sun Apr 13 17:09:45 2008 (4802A0C9)
767f0000 76818000 schannel schannel.dll Wed Jun 30 05:31:34 2010 (4C2B3926)
769c0000 76a74000 userenv userenv.dll Sun Apr 13 17:11:08 2008 (4802A11C)
76b40000 76b6d000 winmm winmm.dll Sun Apr 13 17:11:40 2008 (4802A13C)
76c30000 76c5e000 wintrust wintrust.dll Wed Dec 23 22:59:40 2009 (4B33115C)
76c90000 76cb8000 imagehlp imagehlp.dll Sun Apr 13 17:10:00 2008 (4802A0D8)
76d60000 76d79000 iphlpapi iphlpapi.dll Sun Apr 13 17:09:52 2008 (4802A0D0)
76f20000 76f47000 dnsapi dnsapi.dll Fri Jun 20 10:46:57 2008 (485BED11)
76fc0000 76fc6000 rasadhlp rasadhlp.dll Sun Apr 13 17:10:38 2008 (4802A0FE)
76fd0000 7704f000 clbcatq clbcatq.dll Sun Apr 13 17:09:29 2008 (4802A0B9)
77050000 77115000 comres comres.dll Sun Apr 13 17:09:50 2008 (4802A0CE)
77120000 771ab000 oleaut32 oleaut32.dll Sun Apr 13 17:10:58 2008 (4802A112)
773d0000 774d3000 comctl32 comctl32.dll Mon Aug 23 09:12:01 2010 (4C729DD1)
774e0000 7761e000 ole32 ole32.dll Fri Jul 16 05:05:55 2010 (4C404B23)
77a80000 77b15000 crypt32 crypt32.dll Sun Apr 13 17:09:59 2008 (4802A0D7)
77b20000 77b32000 msasn1 msasn1.dll Fri Sep 04 14:03:36 2009 (4AA180A8)
77b40000 77b62000 apphelp apphelp.dll Sun Apr 13 17:09:35 2008 (4802A0BF)
77bd0000 77bd7000 midimap midimap.dll Sun Apr 13 17:10:20 2008 (4802A0EC)
77be0000 77bf5000 msacm32_77be0000 msacm32.dll Sun Apr 13 17:11:03 2008 (4802A117)
77c00000 77c08000 version version.dll Sun Apr 13 17:11:09 2008 (4802A11D)
77c10000 77c68000 msvcrt msvcrt.dll Sun Apr 13 17:12:56 2008 (4802A188)
77dd0000 77e6b000 advapi32 advapi32.dll Mon Feb 09 04:10:48 2009 (49901D48)
77e70000 77f03000 rpcrt4 rpcrt4.dll Mon Aug 16 01:45:00 2010 (4C68FA8C)
77f10000 77f59000 gdi32 gdi32.dll Thu Oct 23 05:36:14 2008 (49006FBE)
77f60000 77fd6000 shlwapi shlwapi.dll Tue Dec 08 01:23:28 2009 (4B1E1B10)
77fe0000 77ff1000 secur32 secur32.dll Thu Jun 25 01:25:26 2009 (4A433476)
78130000 781e0000 mozcrt19 mozcrt19.dll Sat Mar 19 14:01:04 2011 (4D851990)
7c420000 7c4cf000 mozcpp19 mozcpp19.dll Sat Mar 19 14:01:14 2011 (4D85199A)
7c800000 7c8f6000 kernel32 kernel32.dll Sat Mar 21 07:06:58 2009 (49C4F482)
7c900000 7c9b2000 ntdll ntdll.dll Thu Dec 09 07:15:09 2010 (4D00F27D)
7c9c0000 7d1d7000 shell32 shell32.dll Fri Jan 21 06:44:37 2011 (4D399BD5)
7e410000 7e4a1000 user32 user32.dll Sun Apr 13 17:11:07 2008 (4802A11B)
Closing open log file c:debuglog.txt

 

broni says my computer is clean of malware. When having my machine write out memory dumps are there any special steps I need to do? The Microsoft site just says it is enabled by default in Windows XP.

Any other ideas what might be causing my BSOD issue? I have tried setting BIOS settings to default and cleaning out some dust from inside my computer and also replugging all the connections.

 

Try uninstalling Firefox, and getting the latest version.
http://www.technogadge.com/how-to-stop-firefox-plugin-container-exe-process/

 

This did not work. I am still getting BSODs.

I am trying to uninstall Windows SDK v7.1 from the "Add or remove programs" and also running winsdk_web.exe to remove the program. I am getting an error message that says "SDKSetupExe has encountered a problem and needs to close. We are sorry for the inconvenience." How else can I uninstall this program?

 

You could try Revo Uninstaller.

But before doing anything, take a system backup so that you can restore it if something ugly happens.

 

Whenever I look in C:\Windows\Minidump\ there's always those 3 same .dmp files. Is my computer not updating the .dmp files whenever I get a BSOD?

I have also uninstalled the Debugging Tools for Windows (x86), how do I get it installed again if I cannot run winsdk_web.exe?

 

Whenever I open Windows SDK 7.1 Command Prompt it says:
"Error: The system was unable to find the specified registry or key "

Then after that it says:
"The x86 compilers are not currently installed. x86-x86
Please go to Add/Remove Programs to update your installation. "

Could the registry be messed up? Is this why I am getting the "SDKSetupExe has encountered a problem and needs to close. We are sorry for the inconvenience." error? How should I fix this?

 

Do a search of the Windows (C:\) drive for
*.dmp
They can be saved in a few different directories. [The one you posted was: C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]

Matt

 

I thought I posted the 3 Minidump's but I guess I forgot to do it before cause the Admin had to keep approving my post before I could make another post.

I have another problem now. My Windows Search looks like this:

Why can't I "Insert Image" like in the "Malware and Virus Removal Section" of the forum?

 

I'm trying to avoid this at all possible. It takes a very long time to install all my programs and Windows Updates if I do this.

I was able to get Windows SDK v7.1 and Debugging Tools for Windows (x86) reinstalled. I had to uninstall and reinstall Microsoft .NET Framework 4 Client Profile then I was able to uninstall Windows SDK v7.1 and then run winsdk_web.exe.

I have also uninstalled Windows Search 4.0 and was able to use my search function again. This was the only file called MEMORY.DMP on my hard drive. Located in C:\Windows\, here is the log:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Could not open dump file [C:\WINDOWS\MEMORY.DMP], NTSTATUS 0xC000011E
"An attempt was made to map a file of size zero with the maximum size specified as zero. "

 

I could post the 3 mini dump logs if you still want but they are dated 1/4/2010, 1/4/2010, and 10/3/2009. Its always those 3 same files in C:\WINDOWS\Minidump.

I had this problem located in this thread here. After this happened Windows Search 4.0 and services.msc look all weird. To get to services.msc go to Start\Run\services.msc. Mines look like this right now, how can I fix this?

 

If Arie suggests a reformat, I wouldn't think it was suggested lightly.

Your last .jpg shows a distorted Services window, obviously we can't scroll through the services listing.

Consider that your system is "sick ".

If the latest BSOD is 1/4/2010, then the problem doesn't (currently) seem to a "blue screen of death ".

If things are distorted, Windows Search doesn't work, etc?, consider reformatting, I would not like my system being "sick" and not working correctly.

Matt

 

I just started having this hpt374.sys BSOD problem recently (started on June 6). Do I have to do anything special to save the dump logs whenever the BSOD happens?

I have uninstalled Windows Search 4.0 and am now using the older Windows Search, it is not distorted and works fine, only services.msc is distorted right now. The distortion problems happened after a bad Windows Update described in the thread here.

 

Settings for generating the file are in Control Panel -> System -> Advanced tab -> Startup and Recovery -> Settings button -> System Failure.

 

"Write an event to the system log" is checked.
"Send an administrative alert" is checked.
"Automatically restart" is un-checked.
Are these the correct settings?

Under "Write debugging information" it is set to (none)
Are these the correct settings?

Under "System startup "
"Time to display list of operating systems:" is un-checked.
"Time to display recovery options when needed:" is checked with 30 seconds.
Do these settings matter?