1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Kernel32 - Blue screening BSOD (Mark's thread)

Discussion in 'Earlier Versions of Windows' started by Mark Preston, Apr 26, 2004.

Thread Status:
Not open for further replies.
  1. Mark Preston

    Mark Preston Thread Starter

    Joined:
    Apr 26, 2004
    Messages:
    3
    A failed installation of HP 3400 C scanner software has Win98SE reporting many BSODs.

    The most recent is:

    Kernel32 caused a general fault protection error in . . . krnl386.exe.

    Nothing returns from a Google search with Win error message that is "on point" with this problem.

    Mostly the system is working. Dr. Watson sees noting unusual. 98se starts and stops OK, except when BSOD, obviously. The most common fault seems to be Explorer itself blowing up. Next is Kernel32 blowing up which causes the system, mouse, kb, to crash and then must be warm booted.

    Per an earllier post, I have used MSCONFIG to select "normal" start-up. Run Hi-jack, here is the results of that:

    Logfile of HijackThis v1.97.7
    Scan saved at 3:50:52 PM, on 4/26/04
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\STAROFFICE\SOINTGR.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\TEMP\ZTV255\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netzero.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: (no name) - {A114D52B-870C-4F15-8021-B6D7F91A054B} - C:\PROGRA~1\IFINGER\PLUGINS\IE.IFP
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [NAV DefAlert] C:\PROGRA~1\NORTON~1\DEFALERT.EXE
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [SO5 Integrator Pass Two] C:\PROGRA~1\STAROF~1\SOINTGR.EXE
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [zzzHPSETUP] D:\Setup.exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
    O4 - HKLM\..\RunServices: [SO5 Integrator Pass One] C:\PROGRA~1\STAROF~1\SOINTGR.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
    O8 - Extra context menu item: Si&milar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
    O8 - Extra context menu item: Backward &Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
    O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: iFinger (HKLM)
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38087.5984490741
    O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://www.support.gateway.com/support/serialharvest/gwCID.CAB
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/12119/CTSUEng.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/12119/CTPID.cab
    O16 - DPF: {E56347B0-6C2B-4C2E-939F-EE513EAC80BC} (Creative Product Registration ActiveX Control Module) - http://us.creative.com/support/register/OCXs/CtORWebClientWin98SENoMFC.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab
    O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://download.yahoo.com/dl/mail/autocomplete.cab

    I also have saved the "Details" from Win98's error messages, many are redundant but, here they are:

    While "Find"ing *.pwl, Win98SE returned:

    DDIHAND caused an invalid page fault in
    module <unknown> at 0000:00000000.
    Registers:
    EAX=00000000 CS=0000 EIP=00000000 EFLGS=00000000
    EBX=00000000 SS=0000 ESP=00000000 EBP=00000000
    ECX=00000000 DS=0000 ESI=00000000 FS=0000
    EDX=00000000 ES=0000 EDI=00000000 GS=0000
    Bytes at CS:EIP:

    Stack dump:

    [nothing]

    Calling IExplorer 6.0 returned:

    MPREXE caused an invalid page fault in
    module KERNEL32.DLL at 017f:bff9dfff.
    Registers:
    EAX=00000000 CS=017f EIP=bff9dfff EFLGS=00000246
    EBX=81d41d94 SS=0187 ESP=0084f9d0 EBP=00000000
    ECX=00000187 DS=0187 ESI=00000001 FS=34c7
    EDX=0084fb70 ES=0187 EDI=bffca060 GS=0000
    Bytes at CS:EIP:
    cc a1 e0 9c fc bf 8b 00 66 64 f7 05 1c 00 00 00
    Stack dump:
    01df0000 81d41dd8 8bd82b0f 00000000 81d45214 c1f93bf0
    81d25554 c1f93bf0 00000000 00000000 8a3e05c7 000004c7
    2c1f0000 4e598a1e fa901797 0e500084


    Calling IE 6.0 returned:

    MPREXE caused an invalid page fault in
    module KERNEL32.DLL at 017f:bff9dfff.
    Registers:
    EAX=00000000 CS=017f EIP=bff9dfff EFLGS=00000246
    EBX=81d94b30 SS=0187 ESP=0084f9d0 EBP=00000000
    ECX=00000187 DS=0187 ESI=00000001 FS=5937
    EDX=0084fb70 ES=0187 EDI=bffca060 GS=0000
    Bytes at CS:EIP:
    cc a1 e0 9c fc bf 8b 00 66 64 f7 05 1c 00 00 00
    Stack dump:
    01df0000 81d94b74 8bd845a7 00000000 81d8cb70 e57acfb0
    81d2c0e0 e57acfb0 00000000 00000000 bff741f7 000004c7
    2a570000 4e598a1e fa901787 09120084

    Trying to use Win Explorer to see the directory of the I/Omega CD-Rom
    install cd returned:

    EXPLORER caused an invalid page fault in
    module <unknown> at 0000:642042ef.
    Registers:
    EAX=000039d7 CS=017f EIP=642042ef EFLGS=00010246
    EBX=01e9fbe0 SS=0187 ESP=01e9fb88 EBP=01e9fbc4
    ECX=e526c8d0 DS=0187 ESI=00008c20 FS=2947
    EDX=00016ce4 ES=0187 EDI=01e90000 GS=0000
    Bytes at CS:EIP:

    Stack dump:
    bff72317 00000000 00000113 000000d0
    00015072 35778be4 fed43577 8c408c4c
    00030007 642042ef 01677678 01e9ff88
    bff7186d 000039d7 01e90000 01e9fc12

    DDHELP caused an invalid page fault in
    module <unknown> at 0000:1005a950.
    Registers:
    EAX=00002f17 CS=017f EIP=1005a950 EFLGS=00010246
    EBX=007dfd38 SS=0187 ESP=007dfce4 EBP=007dfd20
    ECX=e52ef070 DS=0187 ESI=007dfd6c FS=2f6f
    EDX=00016ce4 ES=0187 EDI=bfc00000 GS=0000
    Bytes at CS:EIP:

    Stack dump:
    bff72317 00000000 00000000 007dfd40 3a2f8d3c 16d7414d
    00000000 00000000 00000016 00000248 00160248 007dffbc
    bff7186d 00002f17 bfc00000 007dfd72

    Turning the computer on returned:

    EXPLORER caused an invalid page fault in
    module <unknown> at 0000:02dca950.
    Registers:
    EAX=00000d7f CS=017f EIP=02dca950 EFLGS=00010246
    EBX=0059f95e SS=0187 ESP=0059f908 EBP=0059f944
    ECX=e52c6290 DS=0187 ESI=0059f992 FS=2547
    EDX=00016ce4 ES=0187 EDI=00000000 GS=0000
    Bytes at CS:EIP:

    Stack dump:
    bff72317 00000000 00000000 0059f966 896227ff 414d27ff
    02c316d7 0000005c 00840000 01000000 01000000 0059ff68
    bff7186d 00000d7f 00000000 0059f998


    Installing Adobe PhotoDeluxe Business edition returned:

    ISSET_SE caused a general protection fault
    in module KRNL386.EXE at 0001:00005b12.
    Registers:
    EAX=0eef337e CS=015f EIP=00005b12 EFLGS=00000206
    EBX=17a74e92 SS=40af ESP=00004e92 EBP=00004ea4
    ECX=00010ecf DS=16b7 ESI=00006fe0 FS=4087
    EDX=16d715ef ES=0177 EDI=00000000 GS=0000
    Bytes at CS:EIP:
    8e c0 26 ff 06 06 00 ca 02 00 e8 b8 ff 26 a1 20
    Stack dump:
    17af11a4 0ecf337e 2b020001 000017a7 4ec80000 00012058 00015014 0ecf0000 0eef0000 00000000 00000000 00005014 ffff8000 4f14ffff 00001c00 00000000

    Trying to install HP Scanner Software returned:

    HPIBRWSR caused a general protection fault
    in module KRNL386.EXE at 0001:000075a2.
    Registers:
    EAX=fffdabb9 CS=015f EIP=000075a2 EFLGS=00000246
    EBX=00000000 SS=3777 ESP=000082a4 EBP=000082ae
    ECX=00023a0f DS=0187 ESI=000029ef FS=0ecf
    EDX=fffd0000 ES=0187 EDI=00023a0f GS=0000
    Bytes at CS:EIP:
    67 66 8b 5b 54 66 8b 4e 06 b4 0e 2e 8e 1e 02 00
    Stack dump:
    3a0f16b7 00000002 82c20002 17af96fb 00000001 fffdabb9 000029ef 82ce177f 17af96ac 29ef0001 82f40000 29ef92dd 00020000 00003a0f 00000000 29ef01a0

    The HPIBRWSR caused a series of errors, including:

    EXPLORER caused a general protection fault
    in module KRNL386.EXE at 0001:0000ac95.
    Registers:
    EAX=00022a26 CS=015f EIP=0000ac95 EFLGS=00000202
    EBX=00020088 SS=26bf ESP=00008752 EBP=00008754
    ECX=000129ef DS=0177 ESI=000253dc FS=0657
    EDX=00040258 ES=29ef EDI=00020085 GS=0000
    Bytes at CS:EIP:
    8e d8 a1 4e 00 8b 16 50 00 1f c9 ca 02 00 1e 2e
    Stack dump:
    877e16b7 17977653 53dc2a26 00850002 00b416b7 00b416b7 008800c8 01b40258 26bf877e 26bf2485 00b416b7 771a87b4 24852627 26bf8798 00b400b4 000253dc

    Restarting Win returned:

    EXPLORER caused an invalid page fault in
    module <unknown> at 0000:1005a950.
    Registers:
    EAX=00000d7f CS=017f EIP=1005a950 EFLGS=00010246
    EBX=0059f9a8 SS=0187 ESP=0059f954 EBP=0059f990
    ECX=e52d8260 DS=0187 ESI=0059f9dc FS=254f
    EDX=00016ce4 ES=0187 EDI=00000000 GS=0000
    Bytes at CS:EIP:

    Stack dump:
    bff72317 00000000 00000000 0059f9b0 27d789ac 16d7414d 00000000 00000000 00000086 000000f8 008600f8 0059ff68 bff7186d 00000d7f 00000000 0059f9e2

    EXPLORER caused an invalid page fault in
    module <unknown> at 0000:02a9a950.
    Registers:
    EAX=00000d7f CS=017f EIP=02a9a950 EFLGS=00010246
    EBX=0059f95e SS=0187 ESP=0059f908 EBP=0059f944
    ECX=e52ccb20 DS=0187 ESI=0059f992 FS=254f
    EDX=00016ce4 ES=0187 EDI=00000000 GS=0000
    Bytes at CS:EIP:

    Stack dump:
    bff72317 00000000 00000000 0059f966 896227d7 414d27d7 01ca16d7 00000052 00840000 01000000 01000000 0059ff68 bff7186d 00000d7f 00000000 0059f998

    Installing HP Scanner software returned:

    EXPLORER caused a general protection fault
    in module KRNL386.EXE at 0001:000075a2.
    Registers:
    EAX=fffb919b CS=015f EIP=000075a2 EFLGS=00000246
    EBX=00000000 SS=24a7 ESP=0000858a EBP=00008594
    ECX=0002191f DS=0187 ESI=00003727 FS=192f
    EDX=fffb0000 ES=0187 EDI=0000191f GS=0000
    Bytes at CS:EIP:
    67 66 8b 5b 54 66 8b 4e 06 b4 0e 2e 8e 1e 02 00
    Stack dump:
    191f16b7 00000002 85a800f8 17af96fb 00000001 fffb919b 00003727 85b40000 17af96ac 37270001 85da0000 372792dd 00000000 85fa191f 00000001 372785f2

    Shutting down Win98SE returned:

    EXPLORER caused an invalid page fault in
    module KERNEL32.DLL at 017f:bff9db61.
    Registers:
    EAX=c00309c4 CS=017f EIP=bff9db61 EFLGS=00010212
    EBX=0059ff68 SS=0187 ESP=0055fdbc EBP=00560058
    ECX=00000000 DS=0187 ESI=00000000 FS=2437
    EDX=bff76855 ES=0187 EDI=bff79138 GS=0000
    Bytes at CS:EIP:
    53 8b 15 e4 9c fc bf 56 89 4d e4 57 89 4d dc 89
    Stack dump:


    EXPLORER caused a general protection fault
    in module KRNL386.EXE at 0001:000075a2.
    Registers:
    EAX=fff744cd CS=015f EIP=000075a2 EFLGS=00000246
    EBX=00000000 SS=12b7 ESP=0000c58a EBP=0000c594
    ECX=0002262f DS=0187 ESI=000048af FS=2657
    EDX=fff70000 ES=0187 EDI=0000262f GS=0000
    Bytes at CS:EIP:
    67 66 8b 5b 54 66 8b 4e 06 b4 0e 2e 8e 1e 02 00
    Stack dump:
    262f16b7 00000002 c5a80080 17af96fb 00000001 fff744cd 000048af c5b40000 17af96ac 48af0001 c5da0000 48af92dd 00000000 85fa262f 00000001 48af85f2

    Win98 was cold booted. upon inserting a cd in the E:
    (iomega usb 650), the following was returned:

    AUTORUN caused an invalid page fault in
    module KRNL386.EXE at 0002:00007bf8.
    Registers:
    EAX=00030177 CS=0167 EIP=00007bf8 EFLGS=00000286
    EBX=00008bac SS=2e2f ESP=00008b8e EBP=00008ba2
    ECX=0002a0d0 DS=0187 ESI=00417000 FS=0000
    EDX=00000003 ES=0187 EDI=80b45f18 GS=0000
    Bytes at CS:EIP:
    f3 67 a4 66 5b 66 59 66 5f 66 5e 07 1f 5d ca 0c
    Stack dump:
    00008bac 00000000 00000109 00000082 017723ff 7e218bda b7080167
    59c80003 48e00040 2e2f80b3 00a20082 00000000 52e00040 00020040
    59c88bd4 48e00040

    Calling Hearts from Start/Accessories/Games returned:

    HEARTS caused a general protection fault
    in module KRNL386.EXE at 0001:00005e5a.
    Registers:
    EAX=0eff0f36 CS=015f EIP=00005e5a EFLGS=00000246
    EBX=17a786f2 SS=39df ESP=0000497c EBP=0000498c
    ECX=0002226e DS=0f36 ESI=00020001 FS=0000
    EDX=16d71f07 ES=0177 EDI=00030000 GS=0000
    Bytes at CS:EIP:
    8e d9 f6 06 16 00 10 75 10 51 e8 bf 21 59 83 3e
    Stack dump:
    86f21f07 45870000 00000000 0f360001 5ac2499c 16b7015f 17a72b55
    00000000 205849c0 5cf40001 00000001 00004587 00000eff
    5cf40000 80000000


    Man! that is a lot of reading. Thanks for any help, hints, anything what-so-ever.
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Mark we like to handle everyone's problems in separate threads to avoid confusion so I've split yours off here. Please continue to respond to this one.

    First there is nothing seriously amiss with the Scanlog, although I believe this entry may be related to the failed HP installation and should be checked and "fixed" if nothing else is known about it:

    O4 - HKLM\..\Run: [zzzHPSETUP] D:\Setup.exe

    Program Name: zzzhpsetup
    Executable Name: setup.exe
    Required: Unknown at this time
    Comments: ??

    ref: http://www.lafn.org/webconnect/mentor/startup/PENINDEX.HTM

    The variety of errors you are encountering and the circumstances in which you are getting them makes hardware a primary suspect.

    Have you tested the ram? If you have more than one module it would be best to swap out one at a time.

    But you can also try a software tester such as memtest86 or Doc Memory. You need to use a clean formatted floppy to create the bootable disk by running the setup programs provided.

    http://www.memtest86.com/
    http://www.simmtester.com/PAGE/products/doc/docinfo.asp
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/224131

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice