1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved BSOD optical drive issue with ntkrpamp.exe file

Discussion in 'Windows XP' started by dvierra, 2010/10/02.

  1. 2010/10/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    OK, hal.dll is probably the worst error to have, because it can be caused almost by anything. If you read here: http://pcsupport.about.com/od/findbyerrormessage/a/missinghaldll.htm, you're ready to have a heart attack :)

    However, your EventViewer errors may give us some hints.

    Let's try something....

    Go Start>Run (Start Search in Vista), type in:
    msconfig
    Click OK (hit Enter in Vista).

    Click on Startup tab.
    Click Disable all
    IMPORTANT! In case of laptop, make sure, you do NOT disable any keyboard, or touchpad entries.

    Click Services tab.
    Put checkmark in Hide all Microsoft services
    Click Disable all.

    Click OK.
    Restart computer in Normal Mode.

    NOTE. If you use different firewall, than Windows firewall, turn Windows firewall on, just for this test, since your regular firewall won't be running.
    If you use Windows firewall, you're fine.

    Now, try your moves, which normally would cause BSOD.
    Will it happen?
     
  2. 2010/10/03
    dvierra

    dvierra Inactive Thread Starter

    Joined:
    2008/09/09
    Messages:
    43
    Likes Received:
    0
    I need NO attacks of any kind!! Esp on a Sunday night so am skipping that link to read!
    Thx for your assistance BTW, esp on a Sunday night!

    I'll do the msconfig and let you know... I wonder if Roxio will run though since none of the auto loading items won't be running...if I can't use Roxio, I won't be able to test the BSOD issue.... should I still try it?
     

  3. to hide this advert.

  4. 2010/10/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Maybe, it's Roxio issue afterall.
    I hate that program.
    Roxio should run even in Safe Boot. I guess.
    Give it a shot.
     
  5. 2010/10/03
    dvierra

    dvierra Inactive Thread Starter

    Joined:
    2008/09/09
    Messages:
    43
    Likes Received:
    0
    Ok, I cheated a little, but, some good news. I turned everything off except to the two Roxio entries and rebooted. Then loaded a blank with just windows, then with Roxio running and NO BSOD....did it a few times....next?
     
  6. 2010/10/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You have pretty serious number of startups, so you go back to "msconfig" and re-enable everything, you just disabled.
    Restart computer.
    Meanwhile, I'll go through your startups and I'll prepare a list of startups we'll disable since you don't need number of them to be startups.
    Go....
     
  7. 2010/10/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    If you're done...
    Re-run Autoruns, click on "Logon" tab and UN-check following items (some of them will be up to you):

    + "Adobe Photo Downloader "
    + "AppleSyncNotifier" - up to you - Added by Apple's MobileMe synchronization software. This service helps to synchronize contact, email, and calendar information between your ITouch, iPhone, Mac, and PC.
    + "ATIPTA" - up to you - Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
    + "CPMonitor "
    + "HPDJ Taskbar Utility "
    + "IAAnotif "- only needed if you use the RAID version it's required to notify you if a RAID 1 disk has failed
    + "IndexSearch "
    + "ISUSPM Startup "
    + "ISUSScheduler "
    + "LgWDskTp" - up to you - Related to Logitech Wireless mouse. There is an icon for this program on the taskbar next to the clock. It can change the behavior of other programs or manipulate other programs
    + "Logitech Utility" - up to you - Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove ". If you disable it and find you don't need it leave it disabled
    + "Nuance PDF Professional 6-reminder "
    + "PaperPort PTD "
    + "PDF6 Registry Controller "
    + "PDFHook "
    + "PinnacleDriverCheck" - assuming, you don't want to use Pinnacle at all
    + "RoxWatchTray "
    + "SetDefPrt "
    + "SSBkgdUpdate "
    + "VAIO Recovery" - since you're using Acronis, you may not need it as startup (System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere)
    + "VAIO Update 3 "
    + "Status Monitor.lnk"
    + "AnyDVD "
    + "ISUSScheduler "
    + "WMPNSCFG "

    Restart computer and try to force BSOD.
     
  8. 2010/10/03
    dvierra

    dvierra Inactive Thread Starter

    Joined:
    2008/09/09
    Messages:
    43
    Likes Received:
    0
    Ok, will do. Will let you know tomorrow. Thanks for the help today/night.
     
  9. 2010/10/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome :)
     
  10. 2010/10/05
    dvierra

    dvierra Inactive Thread Starter

    Joined:
    2008/09/09
    Messages:
    43
    Likes Received:
    0
    BSOD with optical drives ntkrpamp.exe - Acronis services entry afcdpsrv.exe

    Hey there Broni.....

    I've been working through the Startups and Services slowly adding from a clean boot... I ended up getting all the Startup items to load with no BSOD issues! Which was weird; however, I then turned all the Services that were off to on.....and lo and behold, BSOD when I inserted discs..........so, I started turning select services off to see if I could find the culprit...about 20% into the list, I decided to try the two Acronis entries - AND I found it (also after looking on their support site to see many entries about their NonStop option which didn't affect optical drives for those but mainly USB)...it's the afcdpsrv.exe file [c:\program files\common files\acronis\cdp\afcdpsrv.exe] which Provides nonstop backup for partitions of the computer [File Level CDP Manager Service Version 1.0.0.3536].

    When I turned this off using AutoRuns, I haven't had a BSOD and can use the optical drives in Windows and Roxio without issues. Although, sometimes on a reboot, only one of the optical drives will show in Explorer, but another reboot will then correct it. I don't use the NonStopBackup function in True Image so won't be an issue for me...although, extremely strange how no Acronis files show up in any of the minidump messages so can't see how anyone would have guessed it to be the issue...At this point, I'm going to test actual programs that use the optical drives to see if potentially there might be an issue still down the line, but at least for now, I can use the optical drives without BSODs the minute I load a disc.

    Thanks so much for your help, using those tools you provided helped me get to this point...

    Is there any way to update the subject line to make it easier for them to get to this post - so if someone has some type of drive issue that has Acronis, they should first check out that services entry.

    Thanks again!
     
    Last edited: 2010/10/05
  11. 2010/10/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good news indeed and nice investigating job :)

    I still suggest you use my Autoruns instructions to cut down number of your startups.

    As for topic change (really good idea), you'd have to PM one of mods.
     
  12. 2010/10/05
    dvierra

    dvierra Inactive Thread Starter

    Joined:
    2008/09/09
    Messages:
    43
    Likes Received:
    0
    Ok, I'll do that.

    Thx again for your help!
     
  13. 2010/10/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome :)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.