DRIVER_IRQL_NOT_LESS_OR_EQUAL trouble. Can't Generate Log from DebugWiz.

*Now with DUMP DATA on second post*


I know this is getting to be a common trouble with Windows XP. I understand in order for you guys to help me, I need to display the dump folder contents.

I followed the instructions laid out on here....

Dump Data collection tool and instructions

To collect data from a USER.DMP or a MEMORY.DMP file:

1) Download and install the debugging tools from Microsoft
2) Download and run the tool (debugwiz.exe) located at the bottom of this post.
3) Select a dump using the tool and 'generate log'
3) Open the file c:\debuglog.txt in notepad
4) Cut and paste the data to your thread, if you are starting a new thread, please include DUMP DATA in your title.

Your program crash dump is probably located in C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp


Blue Screens:
The dump file will be c:\MEMORY.DMP or (for Mini-dumps) in C:\WINDOWS\Minidump\

If you do not have a dump, ensure that your machine is configured to write out a dump by following the directions from microsoft

Download debugwiz.zip (Please note that the EXE file has been digitally signed by WinShareSoft)

-----------------------------

I'm having trouble with DebugWiz. When I click Generate Log I'm getting an msdos window flash up quickly saying....

'Initialization Failed, Win32 error'

---------------------------

Then when I look in the debuglog text document, it says....

'Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Unable to get full path of dump file'

-------------------------

But to be honest I'm not sure what I supposed to put in the 'Dump file to be analyzed' space.

When I open it each time it comes up with the error 'You need to hit both the browse buttons before running the log'. I'm just clicking on the only Browse button available by 'Dump file to be analyzed', then click Cancel as I don't know what it is I'm meant to Open.


That's it for the moment. Any help will be hugely appreciated. My PC is pretty messed up at the moment and I can't get by much time without it crashing onto the blue screen.

 

Hi, profondo. Welcome to Windows BBS!

After clicking on the "Browse..." button in DebugWiz, navigate to the C:\WINDOWS\Minidump folder and look for files like "Mini021407-01.dmp" in that Minidump folder. The "021407" is the date of the crash (Feb 14, 2007 in this example). The "-01" is assigned to the first dump for that day, "-02" is assigned to the 2nd dump of that day, and so on.

Click on one of those .dmp files and then click the "Open" button.

Then the path to your .dmp file should be displayed in the "Dump file to be analyzed" field in DebugWiz.

Now you should be ready to click the "Generate Log" button in DebugWiz.


If you want to immediately proceed with troubleshooting yourself, then have a look at this 4-page article:

• Network World: "How to solve Windows system crashes in minutes "
  (specifically the last paragraph of page 3 and all of page 4)

Please let us know if you want more assistance.

 

Thankyou so much Mailman.

Okay here are my results.....

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini010207-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp1.020828-1920
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Sat Dec 30 17:51:41.328 2006 (GMT+0)
System Uptime: 0 days 0:01:21.921
Loading Kernel Symbols
.............................................................................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fff9fd53, 2, 1, 804ec962}

Probably caused by : ntoskrnl.exe ( nt!KiUnlinkThread+0 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fff9fd53, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804ec962, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: fff9fd53

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiUnlinkThread+0
804ec962 095154 or dword ptr [ecx+54h],edx

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: explorer.exe

TRAP_FRAME: f896cde8 -- (.trap fffffffff896cde8)
.trap fffffffff896cde8
ErrCode = 00000002
eax=f896ce88 ebx=81d2efe8 ecx=fff9fcff edx=00000100 esi=fff9fcff edi=81d2f008
eip=804ec962 esp=f896ce5c ebp=f896ce6c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
nt!KiUnlinkThread:
804ec962 095154 or dword ptr [ecx+54h],edx ds:0023:fff9fd53=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 804dce53 to 805266db

STACK_TEXT:
f896cdcc 804dce53 0000000a fff9fd53 00000002 nt!KeBugCheckEx+0x19
f896cdcc 804ec962 0000000a fff9fd53 00000002 nt!KiTrap0E+0x2ad
f896ce58 804ec78a 81d2efe0 81d2efe8 00000100 nt!KiUnlinkThread
f896ce6c 804ecf28 00000000 f896ce88 81d2f008 nt!KiUnwaitThread+0x10
f896ce98 804ec1dc 30d54244 0000007b f896cfc0 nt!KiWaitTest+0xac
f896cfa4 804ec448 30d4493e 00000000 ffdff000 nt!KiTimerListExpire+0x78
f896cfd0 804f1e02 8054ace0 00000000 0000147a nt!KiTimerExpiration+0xb0
f896cff4 804f1b0b f74e22dc 00000000 00000000 nt!KiRetireDpcList+0x46
f896cff8 f74e22dc 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2a
WARNING: Frame IP not in any known module. Following frames may be wrong.
804f1b0b 00000000 00000009 bb835675 00000128 0xf74e22dc


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiUnlinkThread+0
804ec962 095154 or dword ptr [ecx+54h],edx

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!KiUnlinkThread+0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3d6de35c

FAILURE_BUCKET_ID: 0xA_W_nt!KiUnlinkThread+0

BUCKET_ID: 0xA_W_nt!KiUnlinkThread+0

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=804ec962 edi=fff9fd53
eip=805266db esp=f896cdb4 ebp=f896cdcc iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
805266db 5d pop ebp
ChildEBP RetAddr Args to Child
f896cdcc 804dce53 0000000a fff9fd53 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f896cdcc 804ec962 0000000a fff9fd53 00000002 nt!KiTrap0E+0x2ad (FPO: [0,0] TrapFrame @ f896cde8)
f896ce58 804ec78a 81d2efe0 81d2efe8 00000100 nt!KiUnlinkThread (FPO: [0,0,1])
f896ce6c 804ecf28 00000000 f896ce88 81d2f008 nt!KiUnwaitThread+0x10 (FPO: [Non-Fpo])
f896ce98 804ec1dc 30d54244 0000007b f896cfc0 nt!KiWaitTest+0xac (FPO: [Non-Fpo])
f896cfa4 804ec448 30d4493e 00000000 ffdff000 nt!KiTimerListExpire+0x78 (FPO: [Non-Fpo])
f896cfd0 804f1e02 8054ace0 00000000 0000147a nt!KiTimerExpiration+0xb0 (FPO: [Non-Fpo])
f896cff4 804f1b0b f74e22dc 00000000 00000000 nt!KiRetireDpcList+0x46 (FPO: [0,0,0])
f896cff8 f74e22dc 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2a (FPO: [Uses EBP] [0,0,1])
WARNING: Frame IP not in any known module. Following frames may be wrong.
804f1b0b 00000000 00000009 bb835675 00000128 0xf74e22dc
start end module name
804d4000 806c6980 nt ntoskrnl.exe Thu Aug 29 10:03:24 2002 (3D6DE35C)
806c7000 806e6380 hal halaacpi.dll Thu Aug 29 09:05:02 2002 (3D6DD5AE)
bf800000 bf9bac80 win32k win32k.sys Thu Aug 29 10:14:13 2002 (3D6DE5E5)
bff50000 bff52280 framebuf framebuf.dll Thu Aug 29 11:40:42 2002 (3D6DFA2A)
bff80000 bff90d80 dxg dxg.sys Thu Aug 29 11:40:42 2002 (3D6DFA2A)
f7414000 f743ae80 kmixer kmixer.sys Thu Aug 29 09:32:28 2002 (3D6DDC1C)
f7693000 f76e3a80 srv srv.sys Sat Aug 18 02:32:06 2001 (3B7DC596)
f7854000 f787e280 mrxdav mrxdav.sys Fri Aug 17 21:50:20 2001 (3B7D838C)
f796e000 f7980e80 wdmaud wdmaud.sys Thu Aug 29 10:00:46 2002 (3D6DE2BE)
f7b14000 f7b21e00 sysaudio sysaudio.sys Thu Aug 29 10:01:17 2002 (3D6DE2DD)
f7bac000 f7bcc380 afd afd.sys Thu Aug 29 10:01:13 2002 (3D6DE2D9)
f7c39000 f7c3c000 ndisuio ndisuio.sys Thu Aug 29 09:35:40 2002 (3D6DDCDC)
f7f0d000 f7f22380 dump_atapi dump_atapi.sys Thu Aug 29 09:27:48 2002 (3D6DDB04)
f7f23000 f7f4ea00 wlags51b wlags51b.sys Mon Sep 22 16:13:58 2003 (3F6F11B6)
f8017000 f807a800 mrxsmb mrxsmb.sys Thu Aug 29 09:59:51 2002 (3D6DE287)
f807b000 f80a2e00 rdbss rdbss.sys Thu Aug 29 09:58:48 2002 (3D6DE248)
f80a3000 f80c9580 netbt netbt.sys Thu Aug 29 10:01:56 2002 (3D6DE304)
f80ca000 f811b480 tcpip tcpip.sys Thu Aug 29 09:58:10 2002 (3D6DE222)
f813c000 f814d500 VIDEOPRT VIDEOPRT.SYS Thu Aug 29 09:32:03 2002 (3D6DDC03)
f8182000 f8184900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f818a000 f818e000 watchdog watchdog.sys Thu Aug 29 09:32:20 2002 (3D6DDC14)
f819a000 f819cf80 mouhid mouhid.sys Fri Aug 17 21:47:57 2001 (3B7D82FD)
f819e000 f81bf780 update update.sys Sat Aug 18 04:53:56 2001 (3B7DE6D4)
f81c0000 f81ec880 rdpdr rdpdr.sys Thu Aug 29 09:06:34 2002 (3D6DD60A)
f81ed000 f81fd200 psched psched.sys Thu Aug 29 09:35:54 2002 (3D6DDCEA)
f829e000 f82b3600 ndiswan ndiswan.sys Thu Aug 29 09:58:38 2002 (3D6DE23E)
f82b4000 f82c6900 parport parport.sys Thu Aug 29 09:27:29 2002 (3D6DDAF1)
f82c7000 f82e8180 USBPORT USBPORT.SYS Thu Aug 29 09:32:49 2002 (3D6DDC31)
f82e9000 f8309280 ks ks.sys Thu Aug 29 10:13:40 2002 (3D6DE5C4)
f830a000 f832ac80 portcls portcls.sys Thu Aug 29 10:00:58 2002 (3D6DE2CA)
f832b000 f8370500 emu10k1m emu10k1m.sys Sat Aug 04 03:36:34 2001 (3B6B5FB2)
f837d000 f837f280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
f83b9000 f83d2680 Mup Mup.sys Thu Aug 29 10:12:53 2002 (3D6DE595)
f83d3000 f83fbe80 NDIS NDIS.sys Thu Aug 29 10:09:23 2002 (3D6DE4C3)
f83fc000 f8485300 Ntfs Ntfs.sys Thu Aug 29 10:13:37 2002 (3D6DE5C1)
f8486000 f8499780 KSecDD KSecDD.sys Fri Aug 17 21:50:01 2001 (3B7D8379)
f849a000 f84aae80 sr sr.sys Thu Aug 29 09:17:56 2002 (3D6DD8B4)
f84ab000 f84c0380 atapi atapi.sys Thu Aug 29 09:27:48 2002 (3D6DDB04)
f84c1000 f84e4b80 dmio dmio.sys Fri Aug 17 21:58:27 2001 (3B7D8573)
f84e5000 f8503880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f8504000 f852fc80 ACPI ACPI.sys Thu Aug 29 09:09:03 2002 (3D6DD69F)
f8551000 f8560600 pci pci.sys Thu Aug 29 09:09:10 2002 (3D6DD6A6)
f8561000 f8569c00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f8571000 f857e980 ohci1394 ohci1394.sys Thu Aug 29 09:33:19 2002 (3D6DDC4F)
f8581000 f858d580 1394BUS 1394BUS.SYS Thu Aug 29 09:33:19 2002 (3D6DDC4F)
f8591000 f859a280 MountMgr MountMgr.sys Fri Aug 17 21:47:36 2001 (3B7D82E8)
f85a1000 f85ad000 VolSnap VolSnap.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f85b1000 f85b9400 disk disk.sys Thu Aug 29 09:27:56 2002 (3D6DDB0C)
f85c1000 f85cc500 CLASSPNP CLASSPNP.SYS Thu Aug 29 10:08:42 2002 (3D6DE49A)
f85f1000 f85ff200 drmk drmk.sys Thu Aug 29 09:32:30 2002 (3D6DDC1E)
f8601000 f8609e80 sfmanm sfmanm.sys Sat Aug 04 03:36:35 2001 (3B6B5FB3)
f8611000 f861f280 nic1394 nic1394.sys Thu Aug 29 09:33:29 2002 (3D6DDC59)
f8621000 f862ab80 imapi imapi.sys Thu Aug 29 09:28:05 2002 (3D6DDB15)
f8631000 f863c980 cdrom cdrom.sys Thu Aug 29 09:27:55 2002 (3D6DDB0B)
f8641000 f864ed00 redbook redbook.sys Thu Aug 29 09:27:45 2002 (3D6DDB01)
f8651000 f8660400 serial serial.sys Thu Aug 29 10:08:27 2002 (3D6DE48B)
f8661000 f866d780 i8042prt i8042prt.sys Thu Aug 29 10:06:37 2002 (3D6DE41D)
f8671000 f867cd00 rasl2tp rasl2tp.sys Thu Aug 29 10:06:36 2002 (3D6DE41C)
f8681000 f868a800 raspppoe raspppoe.sys Fri Aug 17 21:55:33 2001 (3B7D84C5)
f8691000 f869c500 raspptp raspptp.sys Thu Aug 29 10:12:46 2002 (3D6DE58E)
f86a1000 f86a9400 msgpc msgpc.sys Fri Aug 17 21:54:19 2001 (3B7D847B)
f86b1000 f86ba400 termdd termdd.sys Thu Aug 29 09:40:32 2002 (3D6DDE00)
f86c1000 f86ca480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f86d1000 f86ddb00 usbhub usbhub.sys Thu Aug 29 09:32:49 2002 (3D6DDC31)
f86f1000 f86ff280 ipsec ipsec.sys Thu Aug 29 10:07:19 2002 (3D6DE447)
f8701000 f8709200 wanarp wanarp.sys Fri Aug 17 21:55:23 2001 (3B7D84BB)
f8711000 f8719180 netbios netbios.sys Thu Aug 29 09:35:45 2002 (3D6DDCE1)
f8721000 f872f000 arp1394 arp1394.sys Thu Aug 29 09:33:29 2002 (3D6DDC59)
f8731000 f8739880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
f8741000 f8749700 HIDCLASS HIDCLASS.SYS Thu Aug 29 09:32:40 2002 (3D6DDC28)
f8751000 f875f900 Cdfs Cdfs.SYS Thu Aug 29 09:58:50 2002 (3D6DE24A)
f87d1000 f87d6c80 PCIIDEX PCIIDEX.SYS Thu Aug 29 09:27:47 2002 (3D6DDB03)
f87d9000 f87dd900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f8801000 f8808f00 amdk7 amdk7.sys Thu Aug 29 09:05:05 2002 (3D6DD5B1)
f8821000 f8825b80 usbuhci usbuhci.sys Thu Aug 29 09:32:48 2002 (3D6DDC30)
f8831000 f8835b80 usbehci usbehci.sys Thu Aug 29 09:32:47 2002 (3D6DDC2F)
f8849000 f884ea00 RTL8139 RTL8139.SYS Wed May 30 07:14:57 2001 (3B148FE1)
f8859000 f885a000 fdc fdc.sys unavailable (00000000)
f8871000 f8876b80 kbdclass kbdclass.sys Thu Aug 29 09:26:59 2002 (3D6DDAD3)
f8881000 f8885580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f8891000 f8895080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f88a1000 f88a6600 mouclass mouclass.sys Thu Aug 29 09:27:00 2002 (3D6DDAD4)
f88b9000 f88bdd00 flpydisk flpydisk.sys Thu Aug 29 09:27:43 2002 (3D6DDAFF)
f88d9000 f88ddd00 vga vga.sys Thu Aug 29 09:32:03 2002 (3D6DDC03)
f88e9000 f88ed680 Msfs Msfs.SYS Fri Aug 17 21:50:02 2001 (3B7D837A)
f88f9000 f8900380 Npfs Npfs.SYS Fri Aug 17 21:50:03 2001 (3B7D837B)
f8931000 f8936c80 HIDPARSE HIDPARSE.SYS Fri Aug 17 22:02:04 2001 (3B7D864C)
f8961000 f8964000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
f89e9000 f89eb680 gameenum gameenum.sys Thu Aug 29 09:32:42 2002 (3D6DDC2A)
f89fd000 f8a00a80 serenum serenum.sys Fri Aug 17 21:50:13 2001 (3B7D8385)
f8a09000 f8a0b580 hidusb hidusb.sys Fri Aug 17 22:02:16 2001 (3B7D8658)
f8a0d000 f8a0f580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f8a1d000 f8a20f80 TDI TDI.SYS Fri Aug 17 21:57:25 2001 (3B7D8535)
f8a51000 f8a52b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
f8a53000 f8a54100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8a55000 f8a56300 viaide viaide.sys Thu Aug 29 09:27:48 2002 (3D6DDB04)
f8a57000 f8a58700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
f8a61000 f8a62b00 ctlfacem ctlfacem.sys Sat Aug 04 03:36:32 2001 (3B6B5FB0)
f8a6f000 f8a70280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
f8a73000 f8a74f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
f8a77000 f8a78080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
f8a7d000 f8a7e080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
f8a81000 f8a82080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
f8a87000 f8a88100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8ad1000 f8ad2a80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
f8baf000 f8bafe80 ctljystk ctljystk.sys Thu Jul 19 23:28:02 2001 (3B575EF2)
f8bba000 f8bbac00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
f8bc2000 f8bc2f00 swenum swenum.sys Fri Aug 17 21:48:47 2001 (3B7D832F)
f8bd1000 f8bd1b80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)
f8c6f000 f8c6fd00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)

Unloaded modules:
f7947000 f796e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7981000 f79a4000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8be4000 f8be5000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7ae4000 f7af1000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7af4000 f7b02000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8aaf000 f8ab1000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88c9000 f88ce000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8385000 f8388000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


So does anyone know what I need to do from here on out?

 

That's a pretty old dump. Can you post data for any newer dumps?

That is a Windows XP system file so your posted dump log is probably of very limited value.

If you can post dump logs for some (3 or 4 maybe) of your most recent dumps, then we might be able to narrow down the culprit more quickly.

 

Okay sorry. Here's what I think is the latest one.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini021307-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp1.020828-1920
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Tue Feb 13 21:55:40.718 2007 (GMT+0)
System Uptime: 0 days 0:01:19.312
Loading Kernel Symbols
......................................................................................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {a42716, 2, 0, 804eceea}

Probably caused by : ntoskrnl.exe ( nt!KiWaitTest+31 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00a42716, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804eceea, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00a42716

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiWaitTest+31
804eceea 6683781601 cmp word ptr [eax+16h],1

CUSTOMER_CRASH_COUNT: 6

DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: Idle

TRAP_FRAME: 80541d64 -- (.trap ffffffff80541d64)
.trap ffffffff80541d64
ErrCode = 00000000
eax=00a42700 ebx=819f4fe8 ecx=80541de4 edx=00000000 esi=819f4fe0 edi=819f5008
eip=804eceea esp=80541dd8 ebp=80541df4 iopl=0 nv up ei pl nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010217
nt!KiWaitTest+0x31:
804eceea 6683781601 cmp word ptr [eax+16h],1 ds:0023:00a42716=????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 804dce53 to 805266db

STACK_TEXT:
80541d48 804dce53 0000000a 00a42716 00000002 nt!KeBugCheckEx+0x19
80541d48 804eceea 0000000a 00a42716 00000002 nt!KiTrap0E+0x2ad
80541df4 804ec1dc 81da9128 000000d4 80541f1c nt!KiWaitTest+0x31
80541f00 804ec448 8054a900 8054a6a0 ffdff000 nt!KiTimerListExpire+0x78
80541f2c 804f1e02 8054ace0 00000000 000013d4 nt!KiTimerExpiration+0xb0
80541f40 804eed89 8054a6a0 ffdffc50 00000000 nt!KiRetireDpcList+0x46
ffdff980 00000000 f896d000 000045dc 00000000 nt!PopIdle0+0x47


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiWaitTest+31
804eceea 6683781601 cmp word ptr [eax+16h],1

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 3d6de35c

SYMBOL_NAME: nt!KiWaitTest+31

FAILURE_BUCKET_ID: 0xA_nt!KiWaitTest+31

BUCKET_ID: 0xA_nt!KiWaitTest+31

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=804eceea edi=00a42716
eip=805266db esp=80541d30 ebp=80541d48 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
805266db 5d pop ebp
ChildEBP RetAddr Args to Child
80541d48 804dce53 0000000a 00a42716 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
80541d48 804eceea 0000000a 00a42716 00000002 nt!KiTrap0E+0x2ad (FPO: [0,0] TrapFrame @ 80541d64)
80541df4 804ec1dc 81da9128 000000d4 80541f1c nt!KiWaitTest+0x31 (FPO: [Non-Fpo])
80541f00 804ec448 8054a900 8054a6a0 ffdff000 nt!KiTimerListExpire+0x78 (FPO: [Non-Fpo])
80541f2c 804f1e02 8054ace0 00000000 000013d4 nt!KiTimerExpiration+0xb0 (FPO: [Non-Fpo])
80541f40 804eed89 8054a6a0 ffdffc50 00000000 nt!KiRetireDpcList+0x46 (FPO: [0,0,0])
ffdff980 00000000 f896d000 000045dc 00000000 nt!PopIdle0+0x47 (FPO: [Non-Fpo])
start end module name
804d4000 806c6980 nt ntoskrnl.exe Thu Aug 29 10:03:24 2002 (3D6DE35C)
806c7000 806e6380 hal halaacpi.dll Thu Aug 29 09:05:02 2002 (3D6DD5AE)
bf800000 bf9bac80 win32k win32k.sys Thu Aug 29 10:14:13 2002 (3D6DE5E5)
bff50000 bff52280 framebuf framebuf.dll Thu Aug 29 11:40:42 2002 (3D6DFA2A)
bff80000 bff90d80 dxg dxg.sys Thu Aug 29 11:40:42 2002 (3D6DFA2A)
f6100000 f610e900 Cdfs Cdfs.SYS Thu Aug 29 09:58:50 2002 (3D6DE24A)
f64da000 f64ece80 wdmaud wdmaud.sys Thu Aug 29 10:00:46 2002 (3D6DE2BE)
f6605000 f6618680 ipnat ipnat.sys Thu Aug 29 09:36:12 2002 (3D6DDCFC)
f6619000 f6626e00 sysaudio sysaudio.sys Thu Aug 29 10:01:17 2002 (3D6DE2DD)
f6709000 f6759a80 srv srv.sys Sat Aug 18 02:32:06 2001 (3B7DC596)
f689a000 f68c4280 mrxdav mrxdav.sys Fri Aug 17 21:50:20 2001 (3B7D838C)
f6a7d000 f6a9d380 afd afd.sys Thu Aug 29 10:01:13 2002 (3D6DE2D9)
f6bb6000 f6bb9000 ndisuio ndisuio.sys Thu Aug 29 09:35:40 2002 (3D6DDCDC)
f7006000 f701b380 dump_atapi dump_atapi.sys Thu Aug 29 09:27:48 2002 (3D6DDB04)
f701c000 f703f700 Fastfat Fastfat.SYS Thu Aug 29 10:12:45 2002 (3D6DE58D)
f714e000 f721b100 avg7core avg7core.sys Mon Dec 18 19:35:45 2006 (4586ED91)
f721c000 f7247a00 wlags51b wlags51b.sys Mon Sep 22 16:13:58 2003 (3F6F11B6)
f72e8000 f730e580 netbt netbt.sys Thu Aug 29 10:01:56 2002 (3D6DE304)
f730f000 f7360480 tcpip tcpip.sys Thu Aug 29 09:58:10 2002 (3D6DE222)
f7381000 f7392500 VIDEOPRT VIDEOPRT.SYS Thu Aug 29 09:32:03 2002 (3D6DDC03)
f769b000 f76bc780 update update.sys Sat Aug 18 04:53:56 2001 (3B7DE6D4)
f76dd000 f76df900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f76e1000 f76e5000 watchdog watchdog.sys Thu Aug 29 09:32:20 2002 (3D6DDC14)
f76e5000 f7711880 rdpdr rdpdr.sys Thu Aug 29 09:06:34 2002 (3D6DD60A)
f7712000 f7722200 psched psched.sys Thu Aug 29 09:35:54 2002 (3D6DDCEA)
f7723000 f7738600 ndiswan ndiswan.sys Thu Aug 29 09:58:38 2002 (3D6DE23E)
f77d9000 f77eb900 parport parport.sys Thu Aug 29 09:27:29 2002 (3D6DDAF1)
f7803000 f7824180 USBPORT USBPORT.SYS Thu Aug 29 09:32:49 2002 (3D6DDC31)
f7825000 f7845280 ks ks.sys Thu Aug 29 10:13:40 2002 (3D6DE5C4)
f7846000 f7866c80 portcls portcls.sys Thu Aug 29 10:00:58 2002 (3D6DE2CA)
f7867000 f78ac500 emu10k1m emu10k1m.sys Sat Aug 04 03:36:34 2001 (3B6B5FB2)
f78ad000 f78af280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
f83b9000 f83d2680 Mup Mup.sys Thu Aug 29 10:12:53 2002 (3D6DE595)
f83d3000 f83fbe80 NDIS NDIS.sys Thu Aug 29 10:09:23 2002 (3D6DE4C3)
f83fc000 f8485300 Ntfs Ntfs.sys Thu Aug 29 10:13:37 2002 (3D6DE5C1)
f8486000 f8499780 KSecDD KSecDD.sys Fri Aug 17 21:50:01 2001 (3B7D8379)
f849a000 f84aae80 sr sr.sys Thu Aug 29 09:17:56 2002 (3D6DD8B4)
f84ab000 f84c0380 atapi atapi.sys Thu Aug 29 09:27:48 2002 (3D6DDB04)
f84c1000 f84e4b80 dmio dmio.sys Fri Aug 17 21:58:27 2001 (3B7D8573)
f84e5000 f8503880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f8504000 f852fc80 ACPI ACPI.sys Thu Aug 29 09:09:03 2002 (3D6DD69F)
f8551000 f8560600 pci pci.sys Thu Aug 29 09:09:10 2002 (3D6DD6A6)
f8561000 f8569c00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f8571000 f857e980 ohci1394 ohci1394.sys Thu Aug 29 09:33:19 2002 (3D6DDC4F)
f8581000 f858d580 1394BUS 1394BUS.SYS Thu Aug 29 09:33:19 2002 (3D6DDC4F)
f8591000 f859a280 MountMgr MountMgr.sys Fri Aug 17 21:47:36 2001 (3B7D82E8)
f85a1000 f85ad000 VolSnap VolSnap.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f85b1000 f85b9400 disk disk.sys Thu Aug 29 09:27:56 2002 (3D6DDB0C)
f85c1000 f85cc500 CLASSPNP CLASSPNP.SYS Thu Aug 29 10:08:42 2002 (3D6DE49A)
f85d1000 f85d9b80 PxHelp20 PxHelp20.sys Wed Oct 18 18:33:53 2006 (45366581)
f8601000 f8609400 msgpc msgpc.sys Fri Aug 17 21:54:19 2001 (3B7D847B)
f8611000 f861f280 nic1394 nic1394.sys Thu Aug 29 09:33:29 2002 (3D6DDC59)
f8621000 f862a400 termdd termdd.sys Thu Aug 29 09:40:32 2002 (3D6DDE00)
f8631000 f863a480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f8641000 f864db00 usbhub usbhub.sys Thu Aug 29 09:32:49 2002 (3D6DDC31)
f8661000 f866f280 ipsec ipsec.sys Thu Aug 29 10:07:19 2002 (3D6DE447)
f8671000 f8679880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
f8681000 f8689200 wanarp wanarp.sys Fri Aug 17 21:55:23 2001 (3B7D84BB)
f8691000 f869f000 arp1394 arp1394.sys Thu Aug 29 09:33:29 2002 (3D6DDC59)
f86a1000 f86a9700 HIDCLASS HIDCLASS.SYS Thu Aug 29 09:32:40 2002 (3D6DDC28)
f8721000 f872f200 drmk drmk.sys Thu Aug 29 09:32:30 2002 (3D6DDC1E)
f8731000 f8739e80 sfmanm sfmanm.sys Sat Aug 04 03:36:35 2001 (3B6B5FB3)
f8741000 f874ab80 imapi imapi.sys Thu Aug 29 09:28:05 2002 (3D6DDB15)
f8751000 f8759400 AnyDVD AnyDVD.sys Sat Jan 27 18:40:17 2007 (45BB9C91)
f8761000 f876c980 cdrom cdrom.sys Thu Aug 29 09:27:55 2002 (3D6DDB0B)
f8771000 f877ed00 redbook redbook.sys Thu Aug 29 09:27:45 2002 (3D6DDB01)
f8781000 f8790400 serial serial.sys Thu Aug 29 10:08:27 2002 (3D6DE48B)
f8791000 f879d780 i8042prt i8042prt.sys Thu Aug 29 10:06:37 2002 (3D6DE41D)
f87a1000 f87acd00 rasl2tp rasl2tp.sys Thu Aug 29 10:06:36 2002 (3D6DE41C)
f87b1000 f87ba800 raspppoe raspppoe.sys Fri Aug 17 21:55:33 2001 (3B7D84C5)
f87c1000 f87cc500 raspptp raspptp.sys Thu Aug 29 10:12:46 2002 (3D6DE58E)
f87d1000 f87d6c80 PCIIDEX PCIIDEX.SYS Thu Aug 29 09:27:47 2002 (3D6DDB03)
f87d9000 f87dd900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f8861000 f8868f00 amdk7 amdk7.sys Thu Aug 29 09:05:05 2002 (3D6DD5B1)
f8869000 f886db80 usbuhci usbuhci.sys Thu Aug 29 09:32:48 2002 (3D6DDC30)
f8871000 f8875b80 usbehci usbehci.sys Thu Aug 29 09:32:47 2002 (3D6DDC2F)
f8879000 f887ea00 RTL8139 RTL8139.SYS Wed May 30 07:14:57 2001 (3B148FE1)
f8881000 f8882000 fdc fdc.sys unavailable (00000000)
f8889000 f888eb80 kbdclass kbdclass.sys Thu Aug 29 09:26:59 2002 (3D6DDAD3)
f8891000 f8895580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f8899000 f889d080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f88a1000 f88a6020 wanatw4 wanatw4.sys Tue Jul 16 16:23:14 2002 (3D343A62)
f88a9000 f88ae600 mouclass mouclass.sys Thu Aug 29 09:27:00 2002 (3D6DDAD4)
f88b1000 f88b5d00 flpydisk flpydisk.sys Thu Aug 29 09:27:43 2002 (3D6DDAFF)
f88c1000 f88c5d00 vga vga.sys Thu Aug 29 09:32:03 2002 (3D6DDC03)
f88c9000 f88cd680 Msfs Msfs.SYS Fri Aug 17 21:50:02 2001 (3B7D837A)
f88d1000 f88d8380 Npfs Npfs.SYS Fri Aug 17 21:50:03 2001 (3B7D837B)
f88d9000 f88dec80 HIDPARSE HIDPARSE.SYS Fri Aug 17 22:02:04 2001 (3B7D864C)
f8901000 f8907c80 avg7rsxp avg7rsxp.sys Tue Dec 12 15:49:04 2006 (457ECF70)
f8939000 f893d200 ATWPKT2 ATWPKT2.SYS Wed Apr 07 16:40:01 2004 (407420D1)
f8961000 f8964000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
f89e9000 f89eb580 hidusb hidusb.sys Fri Aug 17 22:02:16 2001 (3B7D8658)
f89ed000 f89eff80 mouhid mouhid.sys Fri Aug 17 21:47:57 2001 (3B7D82FD)
f8a15000 f8a17680 gameenum gameenum.sys Thu Aug 29 09:32:42 2002 (3D6DDC2A)
f8a21000 f8a24a80 serenum serenum.sys Fri Aug 17 21:50:13 2001 (3B7D8385)
f8a25000 f8a27580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f8a29000 f8a2cf80 TDI TDI.SYS Fri Aug 17 21:57:25 2001 (3B7D8535)
f8a51000 f8a52b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
f8a53000 f8a54100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8a55000 f8a56300 viaide viaide.sys Thu Aug 29 09:27:48 2002 (3D6DDB04)
f8a57000 f8a58700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
f8a71000 f8a72b00 ctlfacem ctlfacem.sys Sat Aug 04 03:36:32 2001 (3B6B5FB0)
f8a73000 f8a74280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
f8a75000 f8a76f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
f8a77000 f8a78080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
f8a79000 f8a7a080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
f8a7b000 f8a7c080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
f8a7f000 f8a80080 avg7rsw avg7rsw.sys Tue Jul 26 13:10:51 2005 (42E6284B)
f8a83000 f8a84100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f8aa3000 f8aa4a80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
f8aa7000 f8aa8d40 ASCTRM ASCTRM.SYS Mon Feb 05 17:50:30 2001 (3A7EE7E6)
f8aa9000 f8aaa360 avgtdi avgtdi.sys Thu Aug 25 10:59:58 2005 (430D969E)
f8aab000 f8aacf80 ElbyCDIO ElbyCDIO.sys Tue Dec 12 22:48:53 2006 (457F31D5)
f8b73000 f8b73e80 ctljystk ctljystk.sys Thu Jul 19 23:28:02 2001 (3B575EF2)
f8b79000 f8b79c00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
f8b7a000 f8b7af00 swenum swenum.sys Fri Aug 17 21:48:47 2001 (3B7D832F)
f8c14000 f8c14b80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)
f8c15000 f8c15f80 avgclean avgclean.sys Mon Aug 21 23:55:15 2006 (44EA39D3)
f8c97000 f8c97d00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)

Unloaded modules:
f63c8000 f63ef000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8c40000 f8c41000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7769000 f7776000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f64b7000 f64da000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f67ea000 f67f8000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8b0d000 f8b0f000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f88b9000 f88be000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f78b1000 f78b4000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Hi again, profondo.

Both of your dumps point to ntoskrnl.exe so that isn't helping me much anyway. Perhaps others more familiar with dump analysis will be able to offer more specific suggestions than me.

In the meantime, here's a link to what Microsoft's Knowledge Base has to say about 0xA errors.

• Microsoft KB314063 Article: Troubleshooting a Stop 0x0000000A error in Windows XP

Please read all of that article as there are several cautions and possibilities that might apply to you.

It's probably best to access Microsoft Knowledge Base (KB) articles with Internet Explorer. I have found other web browsers (such as Firefox) have trouble rendering Microsoft KB web pages properly. (Microsoft KB pages often do not fully display in Firefox.)

According to that Microsoft KB314063 article:

Instructions About How to Access and Use "Event Viewer ":

• Click Start.
• Right-click My Computer.
• Select "Manage" to open the "Computer Management" window.
  (Event Viewer will be displayed under the "System Tools" directory item.)
• Expand "Event Viewer" and then select "Application ", "Security ", and "System" to view the logs.
• Look for "error" events that occurred around the time of shut down. These events will be displayed as icons with either a white X on red background or a black exclamation point on yellow background. In the security section of Event Viewer, events of possible concern are ones that display a padlock icon instead of a key icon.
• Double-click on an individual event to open the "Event Properties" window which shows details about the event.
  • You can use the up/down arrows in the Event Properties" window to move your focus to other events in the list.
  • Use the button below the up/down arrows to copy the details for an event to your clipboard for pasting elsewhere.
  • Click on the "http://go.microsoft.com/fwlink/events.asp" link in the "Event Properties" window to view more information from Microsoft about the event.

 

Hi Profondo and Mailman

Follow all of Mailmans instructions but aslo do the below.

Profondo give us some more info on this issue.

How often does it do it? Does it happen while doing the same thing, ie, is it repeatable? Other words can you make it do it?

Does it do it in safe mode?

Go to device manager at the top under view click show hidden devices.

1. Does anything here have a yellow exclamation or red X?

2. Are there any grayed out Diamonds under Non-Plug and Play Drivers, dimmer that the others?

3. Is there a Other devices category?

If the answer to 1-3 above is yes on any or all. Then boot to Safe Mode go back to them and rt click theses items and uninstall them. Reboot and recheck them in full mode and get back to us with detailed results.

Additionally your log says you are at SP1. Is there a reason you have not updated?

Don't do it yet, if you decide to do so I have some pre update advice.

Mike

 

Mike,

No it never does it at all in Safe Mode.

It used to do it whenever I'd open up anything after I booted up, and probably that had nothing to do with it. Let's say after 30 seconds it won't go to the blue screen. I can't work out why it isn't doing it right now actually.

I'm not sure what 2. means. But yes there are yellow exclamation marks on the 'Other devices' drop down. They're on 'Multimedia Audio Controller' and 'Video Controller (VGA Compatible)'

So should I uninsatll these in Safe Mode and do another DATA DUMP and post it on here?

The reason I haven't updated was this same condition originally caused my PC to crash. That's when it was a fully upto date XP version. I since then have reinstalled XP with an older XP CD, which is the only one I can find. Have tried to do updates a couple of times, but I still eventually get this same error.

 

OK Profondo

Yes uninstall Other devices in safe mode and reboot.

Then recheck.

Either they reinstalled properly or they are back, let us know.

Make sure Show Hidden is checked.

Click open Non-Plug and Play Drivers there will be a series of diamonds.
Are any of these lighter than the rest, if so reboot to safe mode and remove only these.

=========================================

Lets get any other possible issues out of the way so do the following deep cleanup. This is also part of the prep for updating to sp2 if we decide to do so. Very possible it will even fix this issue

Download
ATF-Cleaner http://www.atribune.org/content/view/25/2/
when run check select all run twice or more until nothing else found

==================================================

CCleaner get the slim version http://www.ccleaner.com/download/builds.aspx
Click bottom right Run Cleaner twice then in left panel click issues then below Scan for issues run twice or until no more found

==================================================

Clean all user profiles at once.

http://ezpcfix.net/download.aspx?dlo...x-1-0-0-16.exe

http://ezpcfix.net/download.aspx?dlo...-16/Plugin.inf

The above need to be downloaded and need no install but need to be put together in the same folder.

So download them create a folder I recommend Program Files\EzPcFix and run it from there.

This seems to be a simple and basic program at first but I advise you not tinker with too many of it's other features unless you know what you are doing. As it has some extremely powerful features but looks so harmless.

Here are the steps:

1. Run the program
2. Click Load Hives
3. Double click Delete temp files
4. Select the optional check boxes if you want
5. If you Checked _Restore /System Volume information\_Restore then you should create a new restore point via System Restore.
6. I usually close the Hives before exit

Even better run in Safe Mode.
=================================================

Download install and run
http://www.xblock.com/download/xclean_micro.exe

This is an advanced cleaner that goes after (not everything) but only the worst most prolific and damaging malware and some viri.

Delete ALL it finds no exceptions, if after cleaning an incident, it advises a reboot, say no during the process, but do so when the program ends before continuing with next step below.

I use this as preclean before SpyBot and AdAware.

Mike

 

Okay Mike,

I unistalled 'Multimedia Audio Controller' and 'Video Controller (VGA Compatible)' in Safe Mode. When I went back into regular mode they were picked up but couldn't be installed correctly. It's asks for a software disc which I might have somewhere but I'm not sure where at the minute.

So the status of those are the same as they were before with the yellow !


Now, I followed the instructions for ATF-Cleaner and CCleaner. But the next two links don't work for me. http://ezpcfix.net/download.aspx?dlo...x-1-0-0-16.exe and http://ezpcfix.net/download.aspx?dlo...-16/Plugin.inf

I mean the download pages.

 

Hmmm

Well it gets there but fails for me also now.


do it this way
http://ezpcfix.net
then downloads
then choose them one at a time.

Mike

 

Okay. I hope I'm gonna be able to do all this in Safe Mode because my PC has started with the regular crashing to blue screen routine again.

I don't know if this helps at all but these are the exact errors I'm getting.

Technical information:

***STOP: 0x0000000A (0x00A42716, 0x00000002, 0x00000000, 0x804ECEEA)


Thanks for everyone's help guys. I'll let you know if any of this helps the situation.

 

Okay, I managed to get my PC on again and completed all the steps. A bit of time will tell if it has worked. I wish I could buy you two guys a few drinks, but my thanks might have to do.

Be in touch again if it all goes sour.

 

OK good.

While waiting to see if we have made progress do the following that we will need if we decide to upgrade to SP2.

Startup Control Panel: Use to controll what starts at boot

http://www.mlin.net/files/StartupCPL_EXE.zip
========================================

RegSeeker

http://www.hoverdesk.net/dl/en/RegSeeker.zip
========================================

Download HijackThis:
http://download.bleepingcomputer.com/Merijn/hijackthis_sfx.exe
Double-click hijackthis_sfx.exe, click Unzip

Close the window
HijackThis is installed in C:\Program Files\HijackThis

Run HJT "Select Do a system scan and save log fileâ€

Post this log back to us
=========================================
Download the SP2 full so it can be installed offline (not internet)

http://www.microsoft.com/downloads/...BE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en


Mike

 

OK profondo

Let us know something? I personally need to close this post but I want to finish it!

Mike

 

Okay well first off, nothing has worked because my PC has got back into its crashing phase.

But I've downloaded the RegSeeker (not sure what to do with this one) and HijackThis. I'll post the log as soon as I can get back on for a while without it crashing.

The first link is about controlling what loads up on startup, is that right? Should I be limiting myself to? Are there any specific programes I shouldn't be opening on startup?

 

Hey man

Glad you got back.

Now it may be time to start looking at the Dump again since the cleanup. But not just yet.

The regcleaner was to use to do additional cleanups before SP2 update.

Yes get the HJT log before you do the Killprocess below.

Download and install Killprocess
http://orangelampsoftware.com/downloads/KillProcessSetup.exe

On the download page is a "Download Kill lists" select that then the one that says "Clean Windows XP ". You may have to rt click this and do Save As. When you have it and have installed KillProcess move this file to inside the KillProcess folder.

Instructions for use.
Run KillProcess then click File-Load Kill List, browse to the KillProcess folder and choose "Clean XP.lst ".

Then back to File, then Execute Kill list.

What this does kill all processes that are not in a clean new generic XP install. Does not un-install anything and all will come back on reboot, unless they are removed by a Malware or Virus cleaner. Which is what we want.

Now while running under the Killprocess Killlist the Virus scanner (online resident) is not supposed to be loaded as well as anything else you normally have loading at startup.

But we need to know if we run normally now, if so then the culprit is a driver.

Do the below from the command prompt

netsh interface ip delete arpcache

ipconfig /flushdns

ipconfig /release *

ipconfig /renew *

ipconfig /registerdns

nbtstat -RR

Now run a Spybot and then and Adaware scan. We are doing this both to recheck for malware and to stress the system to see if we are running with all extraneous processes killed.

Mike

 

Thanks Mike.

But right now I can only work in Safe Mode. I'm I able to do the above processes with Killprocess in Safe Mode if I transfer the program over?

Also, have you any idea what gives me a bit of time in normal mode? I have no idea what determines the crash, and then why I can periods when it's fine?

 

Morning Profondo

Lets try a few things to try and locate the problem.

Do each step and as long as it is running in full mode do not go to the next step. We need to know which step cures the problem in full mode.

Step 1. Boot to safe mode and run Startupctl to un-tick all items that are checked. All items in all tabs.
Then boot to full try to reproduce the problem, run like this for as long as it takes you to believe that we have eliminated the problem.

If this seems to cure the problem then it is something in the startups that are causing the problem so get back to me and we will step thru the startups to find the culprit.

Step 2. If step 1 above failed to cure the problem. Go to safe mode then device manager locate the Display adapter rt click and click disable. Reboot F8 (try not to miss and get into full mode by mistake) get the boot menu and choose "Enable VGA Mode ".

When and if it comes up you will have a 640x400 display it will be hard to read. Rt click empty desktop and choose properties and then settings. Choose a resolution that allows you to see all desktop icons easily. Do not try to max out. Just enough to run in for a while to see if all is well now.

If this runs without incident then run Startupctl again and recheck all items and reboot the same way to VGA mode. If everything still runs OK then we have a problem with the Video controller.

This is enough for you to work on for now so. Get back with details of the steps.

Mike

 

Okay, little problem. Looking to run Startupctl and I'm getting back that Windows can't find it.

Does the System Configuration Utility get me to the same place? I've got a StartUp Tab there wth the options to remove them.