atapi.sys posing problems?

Hey guys, i've got a problem. I've got Windows XP Home Edition installed on this HP Pavilion 9755 comp of my dads. Lately, there's been a problem of the BSOD. With it, i've been getting the IRQ_NOT_EQUAL_OR_LESS message, along with the STOP error code. I've tried debugging the minidump file with the WinDbg from the Windows debugging tools from microsoft. When i do the !analyze -v option, i get this report:

Debugging Details:
------------------


READ_ADDRESS: e1046428

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExMapHandleToPointerEx+2b
8057f8b1 8b06 mov eax,[esi]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804dce53 to 805266db

STACK_TEXT:
f7c6eadc 804dce53 0000000a e1046428 00000002 nt!KeBugCheckEx+0x19
f7c6eaf8 00000000 00000000 00000000 82767594 nt!KiTrap0E+0x2ad


FOLLOWUP_IP:
atapi!IdePortInterrupt+30
f98f3fee ?? ???

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: atapi!IdePortInterrupt+30

MODULE_NAME: atapi

IMAGE_NAME: atapi.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3d6ddb04

STACK_COMMAND: kb

BUCKET_ID: 0xA_atapi!IdePortInterrupt+30

Followup: MachineOwner

This to me, says it's an atapi.sys issue, mainly the ideportinterrupt, am i correct? So, where do i go from here?

 

atapi=ide prob

Sure can be atapi.sys! Tell us, did you install winxp home on this box? If so was this a clean install? Have you installed the motherboard resources from the mainboard cd? Any hardware changes recently?

 

nope, never did an install in this comp, it was installed as is from HP. And i'm not sure about the motherboard resources, but we've never had to touch the bios settings. We've had the computer for about a year, and hasn't done this, only recently. I'm starting to think back, i've recently done an upgrade to the service pack 1. Could it be service pack 1's atapi.sys does not work with this HP computer? I'm going to try to put back the original atapi.sys that came with this comp, from the driver.cab in the c:\i386 folder. I do not have the windows xp cd as HP does not give it out(??). I also don't know how the i386 folder got onto the c drive, but anyway, i'll try that. Has anyone got any other clue as to what it is?

 

atapi.sys

Hi again, the atapi.sys is 85kb & located in c:\windows\system32\drivers folder. Also since you installed the SP1, it's located in the servicepakfiles\i386 folder. I'm still lookin' around to "see" what caused this but SP1 is a likely reason

 

nope, not sp1 i got the atapi.sys from driver.cab in my c:\i386 folder, it's the previous version of atapi.sys, the one before sp1. The version number is different from the one i had before. Anyways, put that version in, and it still crashed so it's not sp1. One time though, when i got a BSOD, my cd drivers stuffed up on me, and i had to uninstall and then reinstall the drivers. But, the drives are HP cd roms, and i tried to find updated or even the same drivers from HP, and i couldnt find them. The drives are HP cd writer cd-16f and samsung dvd rom 616f.

 

sorry, update, i just checked the minidump file after this crash, and it's a different sort of crash:

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pagable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: e1030138, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8057f8b1, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: e1030138

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExMapHandleToPointerEx+2b
8057f8b1 8b06 mov eax,[esi]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804dce53 to 805266db

STACK_TEXT:
f4686adc 804dce53 0000000a e1030138 00000002 nt!KeBugCheckEx+0x19
f4686af8 826d3868 00000020 00000150 00000000 nt!KiTrap0E+0x2ad
WARNING: Frame IP not in any known module. Following frames may be wrong.
04605882 00000000 00000000 00000000 00000000 0x826d3868


FOLLOWUP_IP:
nt!ExMapHandleToPointerEx+2b
8057f8b1 8b06 mov eax,[esi]

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!ExMapHandleToPointerEx+2b

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3d6de35c

STACK_COMMAND: kb

BUCKET_ID: 0xA_nt!ExMapHandleToPointerEx+2b

Followup: MachineOwner
---------

This says that the ntoskrnl.exe is at fault now. How do i fix this?

 

kernal

The nt operating system info=ntoskrnl.exe

This is usually due to an error in the boot.ini file. The entry for NT is either missing or incorrect. Edit the boot.ini file and check the entry for NT is correct, for example for an IDE disk the entry should look something like

multi(0)disk(0)rdisk(0)partition(2)\windows XP= "Windows XP
workstation "

look for your boot.ini in the root directory (unhide system files first)

 

exzero

Clean up some first

start-run
type

cleanmgr /sageset:1

On the menu you get select all but compress

then

start-run
type

cleanmgr /sagerun:1

when finished

start-run
type

sfc /scannow

Then reboot retest for prob.

Get back to us.

mike

 

ok, checked the boot.ini, everything looks ok in there. Cleaned up the system using the cleanmgr and checked for valid versions through sfc. Nothing came up. Just rebooted system, and into it for a few minutes, will update on what will happen. I'm going to San Francisco for a few days, i'll have the system up through that time and see if there is a problem.

 

I want to go to SF too, cana canna canna huh!

Last time I was there I went to the club at the top of the SF Marriott and leaned out on the glass that allows you to look almost stright down. Beautiful city from there at night.

Smile.

Maybe this was intermitent, can you not tell already?

How often did it do it?

Mike

 

it's been happening for the last month and a half, as soon as i got here in san diego. Maybe it's just me and my bad luck? hehheeh. Seriously, it's a problem that won't go away, and happens occasionally, and you can not bring it up at will, it just happens whether you're opening internet explorer, or doing movie maker, or netmeeting. It just happens.

Yeah, going to San Francisco with my cousin, i haven't been there before, and my cousin is going to be going to college to fix her timetables. Is it easy to get around? Could i see the whole of San Francisco in 3 days?

 

Don't think you can see it all and do it justice in 3 days.

Hit the warf at pier 37 see the sea lions (they just moved in and took over, and the Californians being Californians let them) and Alcatraz at least.

You will not enjoy it if you try to see to much and make work out of it.

Pretty easy to get arround, they really do have trolleys.

Good places to eat.

Mike

Let me know about your trip when you get back. And about the problem. If it is still there we will continue.

 

ok, system just crashed, right before i'm going to san francisco!!!!!!! not good, this is going to be on my mind while i'm there. Same ntoskrnl.exe crash as i've previously posted. System was up for like 15 hours before it crashed. Where do i go from here? This will probly be my last post till i get back from san francisco though since we're leaving early soon.

 

First I would forget it while in SF.

Not now, but while you are gone I will post details to to do a deep cleanup of both temps and registry.

15 hours! This may be heat related.

You should open case and use air spray to blow out all dust from case and especially the CPU cooler fan and the power supply fan.

But forget it now, keep concentration or your girlfriend will catch you looking at those California girls. In fact the California girls will take your mind off any computer.

Mike

 

ok, finally back! had a good time in san francisco, though i didn't get to do much, i went to fishermans wharf, got on the cable cars, saw union square, saw china town, saw hieghts bury, or something rather, where all the hippies are, and then saw the golden gate bridge up close. So, that was my trip in a nutshell, hahahah. Did more than that, but that's another story. Anyways, i don't know if the system has crashed or not, just got back, so tired. Has anyone had any thoughts of what the problem could be?

 

Sounds like a good trip. You did most important things. Did you get your photo with a Sea Lion?

After 15 hrs then shut down.

First thing is like I said "Air Spray" out the case especially the fans.

This seems to be heat related. If your case has a place add another case fan. A good one.

Mike

 

Supposedly HP will send you a Windows XP "Recovery CD" if you ask:

http://www.hp.com/cposupport/personal_computing/support_doc/bph07143.html
HP Pavilion Desktop PCs - Ordering Recovery Discs
============copy/pasted==============
Windows XP recovery CDs

HP Pavilions that ship with Windows XP do not come with recovery CDs. Instead, they use a hidden space (partition) on the hard drive to store the recovery information. Using a hidden partition provides a convenient, more stable recovery process that eliminates the need for fragile, easily lost recovery CDs.
(snip)
To order Windows XP recovery discs for an HP Pavilion desktop computer, call HP customer care.

 

ok, i've finally gotten around to cleaning the computer, man it was dirty!!!!!! the way HP makes it i think caused even more dirt to build up, since it's got a case fan blowing into the cpu fan, so more outside dirt can come in. So anyways, into like the first half an hour will update, although i won't be spending anmore time on this comp after this avo, i'm going back to australia for another year. I'll call my mum here and update on if it's still locking up after the clean.

 

Exzero

If you are to leave for a year you may want to do a few more things to help the possibilities!

Do the below:

Spyware and adware removal

SpyBot http://security.kolla.de/index.php?lang=en&page=download
Run this twice delete all it finds, always run this before AdAware

AdAware http://www.lavasoftusa.com/downloads.html
Delete all it finds

BHO Demon http://www.definitivesolutions.com/bhodemon.htm
This program runs stand alone no install is required post me the items it finds
_______________________________________________


Registry and System cleaners

RegCleaner http://www.vtoy.fi/jv16/shtml/regcleaner.shtml
Look in first 2 cols for programs you thought you uninstalled or removed, these are the dregs left by the uninstaller. Also tag and remove any that you are POSITIVE are not supposed to be on your computer. After removing these go to the top Tools-Registry Cleanup-Do them all. Delete all it finds.

EasyClean1.7 http://gswi.com/downloads.htm
Run only unnecessary files and registry clean delete all it finds

RegScrubXP http://home.carolina.rr.com/lexunfreeware/RegScrubXPSetup_3.2.exe
NOTE: W2K and XP only
Select RegScrub finds problems and remove all it finds

______________________________________________

http://www.webattack.com/get/xpantispy.shtml
Select everything except these 4 items.
1. Don’t show balloon tips
2. Enable fast shutdown
3. Increase MaxConnectionsPerServer to 10
4. Disable Task Scheduler service
After the first reboot after you run XPAntiSpy go back to XpAntiSpy and uncheck the clear Pagefile at shutdown, as we only want to clear it once.


Do these and you will leave it in as good a condition as possible.

Let me know if you do these things before you go.

Mike

 

ok, just before i left, i did the spybot and adaware, but not bhodemon, i did regclean, but not any of the others because i was on a tight timeline. I didn't get to do the xpantispy either so, i guess i'll have to leave it at that. Hope it was the heat causing it, we'll see i guess when i get in touch with them, thanks for everything guys