Ive had multiple BSOD and complete computer shut offs the last few weeks errors in the mini dump include
IRQL_NOT_LESS_OR_EQUAL (a) - IMAGE_NAME: memory_corruption
PAGE_FAULT_IN_NONPAGED_AREA (50) - IMAGE_NAME: nv4_disp.dll
IRQL_NOT_LESS_OR_EQUAL (a) - IMAGE_NAME: win32k.sys
PFN_LIST_CORRUPT (4e) - IMAGE_NAME: ntoskrnl.exe
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) - IMAGE_NAME: win32k.sys
I get them at various times but mostly when Im working with imageing/compositing software like Adobe After Effects CS 3 (Usually rendering), or Illustrator, but i have also gotten them while watching a video and using openoffice. When I booted into safe mode to check stuff out i opened a command prompt and the computer completely shut off. I tried this 2 times with the same result. I have also had the computer completely shut off when doing ram checks but usually after an hr or 2. There is no warning when it does this just right to black.
Luckly I am able to complete my work by saving constantly and rendering on a laptop its much slower but gets the job done when i need it to. Even if i have to purchase a new computer it would be good to know if i can salvage this one as a backup or even keep it as my primary.
After reading the forums I have done the following:
1. Reinstalled windows (fresh install 3 weeks ago)
2. Updated to the latest Video Card Driver Nvidia
3. Run Memcheck86 on all ram (The ram checked out fine and ran the checks several times. BUT 2 times the computer shut off completely with our an error after about 1-2 hrs of running checks.
4. Put ram in different slots.
5. Removed ram for a lower total
6. Updated BIOS
I am currently running the following on my system
Motherboard: GA-M55SLI-S4 (Gigabyte) UPdated to F11j Bios
CPU: AMD Athlon 64 X2-4600 +
RAM: 4x 1GB G.Skill PC2-6400 DDR II (These are new chips i used to replace the original 2x 1GB chips which i thought was the problem)
Video Card: Nvidia GeForce 8800 GT
OS: Microsoft Windows XP Professional Version 5.1.2600 Service Pack 3 Build 2600
Drive: SATA 300 BG Internal (1 external 500 GB HD with its own power) (This is new also less then 6 months old, replaced an 30 BG SATA)
I am also running dual monitors (But i have turned one monitor off and tried to work) One of the monitors is a Wacom Cintiq.
Other Software that is on when i have these erros:
Zonealarm
AVG
Logitech Setpoint (Wireless Keyboard/Mouse Software)
Nvidia Control Panel
Wacom Tablet.exe BG Process for the Monitor
If I am Missing some information please let me know and ill post it asap
ALSO: I really appreciate the time some of you have taken to help noobs like me work through our computer problems. Thanks.
Ive attached a zip of random dump files
BELOW ARE 2 Of the DUMP FILES If you dont want to read the zip
-----------------
-----------------
-----------------
Loading Dump File [C:\WINDOWS\Minidump\Mini080309-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Aug 3 12:41:06.984 2009 (GMT-4)
System Uptime: 0 days 0:22:22.705
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
..........
Unable to load image win32k.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32k.sys
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, bf80246e, b01639cc, 0}
Probably caused by : win32k.sys ( win32k!xxxUserYield+3f )
Followup: MachineOwner
---------
1: kd> !analyze -v
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf80246e, The address that the exception occurred at
Arg3: b01639cc, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
win32k!xxxUserYield+3f
bf80246e 8b4010 mov eax,dword ptr [eax+10h]
TRAP_FRAME: b01639cc -- (.trap 0xffffffffb01639cc)
ErrCode = 00000000
eax=290af8a0 ebx=00000000 ecx=00000000 edx=00000000 esi=e1984900 edi=804fab14
eip=bf80246e esp=b0163a40 ebp=b0163a40 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
win32k!xxxUserYield+0x3f:
bf80246e 8b4010 mov eax,dword ptr [eax+10h] ds:0023:290af8b0=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 4
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: csrss.exe
LAST_CONTROL_TRANSFER: from bf80a4b2 to bf80246e
STACK_TEXT:
b0163a40 bf80a4b2 e1984900 bf9ab400 e1984b00 win32k!xxxUserYield+0x3f
b0163a5c bf89b736 00000002 8ad979b8 bf89e684 win32k!NtGdiBitBlt+0xad
b0163d30 bf8846e9 bf9ab400 00000001 b0163d54 win32k!xxxDesktopThread+0x179
b0163d40 bf8010ec bf9ab400 b0163d64 0072fff4 win32k!CommitReadOnlyMemory+0x8a
b0163d54 8054162c 00000000 00000022 00000000 win32k!NtUserCallOneParam+0x5
b0163d6c 0072ffec 00000000 00000000 00000000 nt!RtlIpv4StringToAddressExW+0xad
WARNING: Frame IP not in any known module. Following frames may be wrong.
b0163d80 00000000 00000000 00000000 00000000 0x72ffec
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!xxxUserYield+3f
bf80246e 8b4010 mov eax,dword ptr [eax+10h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxUserYield+3f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e87572
FAILURE_BUCKET_ID: 0x8E_win32k!xxxUserYield+3f
BUCKET_ID: 0x8E_win32k!xxxUserYield+3f
Followup: MachineOwner
---------
1: kd> lmvm win32k
start end module name
bf800000 bf9c2f80 win32k M (pdb symbols) c:\windows\symbols\sys\win32k.pdb
Loaded symbol image file: win32k.sys
Image path: win32k.sys
Image name: win32k.sys
Timestamp: Fri Apr 17 08:26:26 2009 (49E87572)
CheckSum: 001C50F1
ImageSize: 001C2F80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
---------------
---------------
--------------
----------------
----------------
Loading Dump File [C:\WINDOWS\Minidump\Mini080309-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Aug 3 10:39:14.906 2009 (GMT-4)
System Uptime: 0 days 0:21:10.625
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
.............
Unable to load image parport.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for parport.sys
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {c0000005, 0, a988fcc8, a988f9c4}
Probably caused by : parport.sys ( parport!PptPdoThread+6b )
Followup: MachineOwner
---------
1: kd> !analyze -v
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 00000000, The address that the exception occurred at
Arg3: a988fcc8, Exception Record Address
Arg4: a988f9c4, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
+7b
00000000 ?? ???
EXCEPTION_RECORD: a988fcc8 -- (.exr 0xffffffffa988fcc8)
ExceptionAddress: 00000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 00000000
Attempt to execute non-executable address 00000000
CONTEXT: a988f9c4 -- (.cxr 0xffffffffa988f9c4)
eax=00590000 ebx=00000000 ecx=00000000 edx=00000000 esi=8ab88088 edi=804faeb6
eip=00000000 esp=a988fd90 ebp=a988fdac iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
00000000 ?? ???
Resetting default scope
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 00000008
EXCEPTION_PARAMETER2: 00000000
WRITE_ADDRESS: 00000000
FOLLOWUP_IP:
parport!PptPdoThread+6b
b75424d3 ?? ???
FAILED_INSTRUCTION_ADDRESS:
+297952f00aadfdc
00000000 ?? ???
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from b75424d3 to 00000000
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
a988fd8c b75424d3 8ae58e70 00000000 897cc818 0x0
a988fdac 805cff70 8ab88200 00000000 00000000 parport!PptPdoThread+0x6b
a988fddc 805460ee b7542468 8ab88288 00000000 nt!IopQueryReconfiguration+0x23
a988fdf8 00000000 00000000 00000000 00001f80 nt!ExpRemovePoolTracker+0x7b
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: parport!PptPdoThread+6b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: parport
IMAGE_NAME: parport.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 48025389
STACK_COMMAND: .cxr 0xffffffffa988f9c4 ; kb
FAILURE_BUCKET_ID: 0x7E_NULL_IP_parport!PptPdoThread+6b
BUCKET_ID: 0x7E_NULL_IP_parport!PptPdoThread+6b
Followup: MachineOwner
---------