[Rollin' Rog]

The error type, given what we have apparently eliminated, still seems to suggest a hardware problem. The error address in the fault 0x81A5FC85 is somewhere in the vicinity of where the ntsokrnl loads. If you had "pstat" on your computer you could possibly verify by running from a command prompt:

pstat

and come up with a long module list, part of which would look like this:

ModuleName Load Addr Code Data Paged LinkDate
------------------------------------------------------------------------------
ntoskrnl.exe 804D7000 478976 93440 1243264 Tue Aug 03 23:19:48 2004
hal.dll 806EC000 35456 42624 29952 Tue Aug 03 22:59:05 2004
KDCOM.DLL F7BAF000 2560 256 1280 Fri Aug 17 13:49:10 2001

------------------------------------------

I don't think it would be especially fruitful to try to get you a copy of pstat if you don't have it.

The bottom line here is, if this is not a hardware problem such as faulty ram a misbehaving motherboard, or perhaps even a bad video card, then there is some corruption of a core system file which only a reinstall will fix in my opinion.

Do you have the means to do a reinstall? It may have to be a clean one.

>> Also, it's a longshot, but since these errors do not occur in Safe Mode, is there any chance you are short on available disk space? That seems to be one of the issues raised with this error ...

http://support.microsoft.com/?kbid=314451&sd=RMVP

[BTS '76]

i've been watching this thread, because of having this exact problem happen to me on a customers PC with windows 2000 pro. He surfed the net with no virus protection software. anyway, i ran hi-jack this, spybot, ad-aware, booted up with VGA only. found some reference to related.htm in add/remove programs, couldn't delete it though. and also a program called yoursitebar.com. I suspect this programs had something to do with the kmode problem, but i was unable to uninstall them. Anyway, my solution was to reload the O.S. this problem is very difficult to solve and as far as i know, no one has solved it yet. so good luck, maybe create a back up of your files and pictures in safe mode, and start from scratch.

[Rollin' Rog]

A clean install will fix anything that is not a hardware problem. A simple "over install", however, only repairs core system files and leaves behind any malware. Just want to emphasize the distinction. Even after an overinstall -- it is still necessary to reinstall all updates -- a huge task these days.

[BTS '76]

agreed. with my case i came to the conclusion that is was not a hardware problem, but a software problem. So, i performed a clean install. wiped the hard drive out and re-installed os, and all apps. everything works good. I'm not saying this is your solution, just letting you know it's a tough one to overcome, and this is what i had to do.

i hope you figure out whats going on, and this problem can be solved for good. even microsoft dosen't know how to solve it. good luck.

[JeffMellinge]

I can't install pstat because installer doesn't work in safe mode.
My main harddrive is partitioned. The C: portion (where windows is) is 6.80GB in size and has 650MB of free space. The H: portion is 21.1GB in size and has 2.1GB free.
If I had to do a clean install, would I have to wipe the H: and C: or just the C:?
i've been thinking about getting XP for awhile but 2000 had been so good for so long.
also, if I hadn't mentioned it earlier: our other computer, which I have connected to a router so it can access the internet off my modem, got the IRQ not less or equal BSoD about 3 weeks before my KMODE one first appeared. neither computer had ever had BSoD problems before that. Any relation?

[Rollin' Rog]

650MB free space could be an issue.

I'm wondering if that is adequate for the paging file.

If you go to System Properties > Advanced > Performance > Advanced, and check the settings. What is the initial and maximum setting at. And how much actual ram is installed?

Can you uninstall or delete a few things to free up some additional memory if needed?

It's also possible to move the paging file to another drive, but note the caveat here:

http://support.microsoft.com/?kbid=123747

As long as you do not repartition the drive, a clean install will give you the option of choosing what partition or drive to install to.

[JeffMellinge]

The initial is 1000 and the max is 1200
as far as total paging size for all drives:
Min Allowed: 2MB
Recommended: 766MB
Currently Allocated: 1000MB
I have 512MB of actual RAM installed
jeff

[Rollin' Rog]

Hmmm, what does it say for "space available" there?

I don't know whether that value is before or after the allocation. I would have to assume after if 1000 mb is currently allocated. And you haven't apparently seen any errors referencing virtual memory.

I wish you'd give the ram testers another shot. You really need to rule that out as much as possible.

If you have Roxio all you need to do is double click the .iso file and it will give you a burn dialog. Just burning the windiag.iso file to a CD is all you need. Then you must ensure the CD is first in the BIOS boot order.

[JeffMellinge]

I created the disc properly this time. Ran the diagnostic. All 6 tests passed:
MATS+, INVC, LRAND, STride 6, WMATS+ and WINVC
I will run the extended tests overnight tonight

[Rollin' Rog]

If the ram tests out ok, and it sounds like it will -- I don't think there is much more recourse here than to try a reinstall.

If you have data on the c: drive that you want to save you will want to copy it to one of the other drives. If you have setup files on that drive which you will want to re-run rather than download again -- then those should be saved to another drive as well.

I would also strongly recommend you download the setup for a firewall application and copy it to another drive or leave it on a burned CD. Install it before going online again, following the reinstall. This will reduce your vulnerabilty to exploits that are only closed following updates to the latest service packs and security patches.

[JeffMellinge]

Haven't done the clean install yet. Been getting the Page Fault in nonpaged area BSoD. Ran across this:
0x00000050: PAGE_FAULT_IN_NONPAGED_AREA

Requested data was not in memory. An invalid system memory address was referenced. Defective memory (including main memory, L2 RAM cache, video RAM) or incompatible software (including remote control and antivirus software) might cause this Stop message, as may other hardware problems (e.g., incorrect SCSI termination or a flawed PCI card).

I notice it mentions "incorrect SCSI termination" and every time I reboot, the event viewer lists this error:
Event Type: Error
Event Source: asc
Event Category: None
Event ID: 9
Date: 11/4/2005
Time: 6:00:50 PM
User: N/A
Computer: FPST-COMPUTER
Description:
The device, \Device\Scsi\asc4, did not respond within the timeout period.
Data:
0000: 0f 00 10 00 01 00 60 00 ......`.
0008: 00 00 00 00 09 00 04 c0 .......À
0010: 01 01 00 50 00 00 00 00 ...P....
0018: 01 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 06 00 00 00 ........
0030: 01 00 00 00 07 00 00 00 ........

there has to be some relation right? How do I figure out what device it is talking about?
also, this was in the event viewer from the very first day the initial BSoD occurred:
Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 10/9/2005
Time: 6:54:49 PM
User: N/A
Computer: FPST-COMPUTER
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xeb83c000, 0x00000000, 0xf8ae2f04, 0x00000000). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini100905-01.dmp.

How do I read/decipher what's in the minidump file?

also, i was running verifier again and there are two files in there that windows says do not exist. dump_wmilib.sys and dump_atapi.sys
when I tried to enable verification of them, it couldn't find them.
then I tried rebooting into safemode and it took about 10 minutes longer than usual and came up with a KMODE exception! so I rebooted again and safemode worked. Was verifier having trouble?

one more thing: Msconfig finds three things from the Trend Micro program in the Startup, but I can't find the corresponding registry keys. A search for each item finds them in C:/WinNT/Installer. Should I delete them?

[Rollin' Rog]

The Scsi reference is to a type of controller card that would normally be connected to a device such as an SCSI disk drive, CD-ROM, Scanner, etc. It sounds like you may have the card installed but no device connected to it.

I'm not really sure what you are seeing there.

If the msconfig items are UNchecked you should be able to find them in:

[HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

or

[HKLM\SOFTWARE\Microsoft\SharedTools\MSConfig\startupfolder]

Else you can simply enable them and run HijackThis and check and "fix" them.

The minidump file won't tell you much more than you saw in the bugcheck -- most of it is jibberish. Although it is possible to extract more out of it using a special utility -- I doubt it would be fruitful since we are not seeing specfic drivers called in the error.

As for drivers listed in verifier, I don't know how it is coming up with its driver base -- but if you can't find them, they can't be running or causing problems.

ATAPI drivers are file system drivers -- such as for the CD-ROM. wmilib.sys looks like a storage driver from Yahama -- it may have something to do with this mysterious SCSI device.

If you like you can post an independent question regarding this SCSI issue in the hardware forum -- it's really a bit out of my tree.

[benosmash]

Hi,
I'm having the KMODE EXCEPTION problem that this person is/was having too. The string of numbers/letters is different though (STOP: 0x0000001E (0xC0000005, 0xBEAE34D0, 0x00000000, 0x00001028) KMODE_Exception....). I was kind of hoping someone might have suggestions as to how I might go about fixing this.

I've been in safe mode of Windows 2k and I've run Avast! Antivirus (updated as recently as 05/16/07) to get rid of any viruses I might have had... I did get rid of at least one... Then I ran Easycleaner, Spybot and Ultrawipe. I still have the problem.

Is there anyone that might be able to help?

[HT_Low]

I thought I would like to inform people that I had this problem too. The related driver was stated as srescan.sys. I understand this should be a driver used by ZoneAlarm but also can be Some malware camouflage themselves as srescan.sys (see this link >> http://www.file.net/process/srescan.sys.html )

I located it and renamed it. When I rebooted, the problem was resolved.

(I am sorry; I do not mean to highjack this thread but thought it might be useful to share.)

[freecho]

I had a kmode problem and noticed in msconfig that all my services was unchecked. I clicked the enable all button and the next reboot most problems, but not all, subsided. I notice the last post from jeff was in 2005, so I would imagine that he reinstalled his OS and there is no way of knowing what services are checked in msconfig.