XP Blue screen crash

[paulxp]

I have just started having a problem with XP home whereby 3 programs (Jedi Outcast II, Roxie EasyCD Creater 5.3, and Infopedia) but not all the time will cause my system to crash. I tried Service Pack 1 and it helped a little. I’ve analyzed the dumps from the crashes. Looking through the dump they all include a warning about ntoskrn.exe. Does anybody else have this problem? If ntoskrnl was corrupted, I don’t anything else would function at all; actually my old 95 programs, word 2002, and lots of other software works great.

MiniDumps

Lastest MiniDump after SP1

Debug session time: Thu Jan 30 23:01:10 2003
System Uptime: 0 days 0:32:01.459
Loading Kernel Symbols


BugCheck 1000008E, {c0000005, 804da2f1, f88f5cf0, 0}

Probably caused by : ntoskrnl.exe ( nt!KiServiceExit2+0 )

*Before SP1*******************************************************
Debug session time: Tue Jan 28 06:35:03 2003
System Uptime: 0 days 0:16:55.940
Unable to load image \WINDOWS\system32\ntoskrnl.exe
*** WARNING: Unable to verify timestamp for ntoskrnl.exe

BugCheck 24, {1902f9, f8965a9c, f896579c, f846ac16}

Probably caused by : Ntfs.sys ( Ntfs!NtfsOverwriteAttr+2c1 )

*******************************************************
Debug session time: Mon Jan 27 20:43:46 2003
System Uptime: 0 days 0:32:07.701
Unable to load image \WINDOWS\system32\ntoskrnl.exe
*** WARNING: Unable to verify timestamp for ntoskrnl.exe

BugCheck 1000008E, {c0000005, f88462b0, f21f7b04, 0}

*** WARNING: Unable to verify timestamp for Cdralw2k.SYS
*** ERROR: Module load completed but symbols could not be loaded for

Cdralw2k.SYS
Unable to load image \SystemRoot\system32\drivers\sysaudio.sys
*** WARNING: Unable to verify timestamp for sysaudio.sys
Unable to load image \SystemRoot\system32\drivers\ks.sys
*** WARNING: Unable to verify timestamp for ks.sys
Probably caused by : Cdralw2k.SYS ( Cdralw2k+2b0 )

*******************************************************
Debug session time: Wed Jan 22 22:34:44 2003
System Uptime: 0 days 0:21:26.723
Unable to load image \WINDOWS\system32\ntoskrnl.exe
*** WARNING: Unable to verify timestamp for ntoskrnl.exe

BugCheck 24, {1902f9, f2792468, f2792168, 8052ce5c}

Unable to load image \??\C:\Program Files\Symantec\SYMEVENT.SYS
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for

SYMEVENT.SYS
Probably caused by : SYMEVENT.SYS ( SYMEVENT+3e78 )

$%$%$%$%$%$%$%$%$%$%$%$%$%%$%$%$$%$%$%$%%%%$%$%$%$%%$%$%
Lastest Memory Dump after SP1
MEMORY DUMP
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Thu Jan 30 23:01:10 2003
System Uptime: 0 days 0:32:01.459

BugCheck 8E, {c0000005, 804da2f1, f88f5cf0, 0}

Probably caused by : ntoskrnl.exe ( nt!KiServiceExit2+0 )

call stack
nt!KeBugCheckEx+0x19
nt!KiDispatchException+0x307
nt!CommonDispatchException+0x4d
nt!KiExceptionExit+0x18e
nt!NtTerminateProcess+0x13f
nt!KiServiceExit2
WARNING: Frame IP not in any known module. Following frames may be

wrong.
0xff53f000
0xefc7f000

System Spec:
XP for HOME (all latest Microsoft fixes applied, Service Pack 1), AMD
XP2000, GE Force 3 Ti 200 from chaintech, 80G HD AZZA motherboard366av, and DDR 512RAM. I've tried the latest drivers for viewsonic and Ndivia. Creative SP Live 5.1

 

[Rhettman5.1]

If we can move this to the Win XP forum, I'm sure you'll get better results...Rhett

 

[Rollin' Rog]

This probably isn't going to help you much, particularly as I've never used the debugger myself, but from what I'm gleaning that error message may have to do more with the debugger than with the original problem.

See if you can sort anything out from this article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;148660

Have you run a chkdsk on the drive?

 

[paulxp]

Chkdsk /f rans OK. Defrag with Norton System Works Pro 2002 Speed Disk; this was also ok. Ran Norton utility to check window problem; it ran ok.

 

[The_Egg]

Please could you provide details of the exact Stop Error code, eg.
(Error description)
STOP:000004a

This information will be displayed on the Blue Screen of Death


I was trying to find out more information about your mobo,
but for some weird reason I can't seem to access the Azza site:
http://www.azza.com.tw/


Please also download and run StartUpList
and paste the contents of the result file here.

This will tell us what programs/apps/processes are loading at bootup, and also what is currently running. This will also help us determine whether or not you've got any viruses, trojans, or spyware issues.

You can run StartUpList in normal mode, for a standard results file.
Or you can run it from the command prompt (Start -> Run) with a switch to provide a complete detailed results file, eg.

"C:\Path\to\StartUpList\StartupList.exe" /complete

(replace "path\to\startuplist\" with the correct path)

The complete list will be even more useful to us.


btw, I see you mentioned Viewsonic in your system specs.
Is this your monitor manufacturer?


For now, solely for the purpose of troubleshooting, I strongly suggest that you also try disabling / shutting down ALL Norton apps and see if the problem still persists.

 

[paulxp]

Hi, All and thankyou for your time.

Below is the startuplist. I have tried running with no startup (msconfig, Load startup items uncheck). It worked for long awhile. Tried it 3 different times. The difference was when the computer crashed, just the game crashed, not XP. No restart was needed. Also Windbg which I copied the text from below displays the STOP code as BugCheck. Most are 8E. I've search the web for info on ntoskrnl.exe . It seem lots of people have a problem, but not mine.

Thanks for your help and suggestions

StartupList report, 2/4/2003, 12:29:51 PM
StartupList version: 1.51
Started from : C:\Documents and Settings\Paul\My Documents\My Received Files\StartupList.EXE
Detected: Windows XP SP1 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CPUCooL\CooLSrv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\WFXSVC.EXE
C:\Program Files\Norton SystemWorks\WinFax\WFXMOD32.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wfxsnt40.exe
C:\PROGRA~1\NORTON~1\WinFax\WFXSWTCH.exe
C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\WINDOWS\System32\devldr32.exe
C:\Documents and Settings\Paul\My Documents\My Received Files\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

WinFaxAppPortStarter = wfxsnt40.exe
WFXSwtch = C:\PROGRA~1\NORTON~1\WinFax\WFXSWTCH.exe
Tweak UI = RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
nwiz = nwiz.exe /install
NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
NAV Agent = C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
AdaptecDirectCD = C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
NAV Helper - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Norton AntiVirus - Scan my computer.job
Norton SystemWorks One Button Checkup.job
Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[QuickTime Object]
InProcServer32 = C:\Program Files\QuickTime\QTPlugin.ocx
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe

[Update Class]
InProcServer32 = C:\WINDOWS\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37649.1349652778

--------------------------------------------------
End of report, 4,361 bytes
Report generated in 0.080 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[isepiq]

You used Norton System Works or some of their programs. It should be called Norton System Hoser. Just having used Nortons Speed Disk and other utilities on your system absolutely causes problems, no doubt about it. So some of your problems are from that. The other thing that no one ever mentions is a BAD or LOW power supply. A cheap power supply will cause all kinds of odds and ends problems. Your Power Supply should be 400 Watts or better with todays memory, cpu, video card, etc., requirements. I build and repair computers, and believe me, this is a problem ESPECIALLY with 'store bought' computers.

Nex time you want to use a Defrag program that is better than the Norton Mess You Up, or the built in, try Diskeeper (www.diskeeper.com). They even have a FREE lite version you can download, a server version, and a workstation version. Something for everyone, and it will do a better job than XP or Norton Problem Producer. The only way I have found to get rid of all the prolems produced by Norton System or Norton Utilities is to format the drive and do a clean re-install without Norton.

Norton VirusScan is the ONLY Norton program I have found that works properly and is good.

IMHO
isepiq

 

[paulxp]

I went through a bad power supply problem last year; I went out and bought me an ANTEC true power. That solve my graphic card problem, and the shut down problem after XP is up and working for awhile. The Post never showed any problems. I periodically use MBM (freeware) to montior the power system.

It funny you should mention Speed Disk. I sent an email off to symantec and told them that since XP SP1 that speed disk will sometimes FRAGMENT a disk more than it DEFRAGs. It takes two or three time to properly defrag. They told me to make sure nothing else is running. I have tried it yet; am going to turn off the startup using MSCONFIG. This is something I've done before. I backup with GHOST regularly, so I'm not worried about trying it. One thing I've notice if that the dump/crash happens when changing or creating CD's. Also booting up with a blank CD in the drive crashed me once. I have Easy Creator 5.30. Roxie just put out the fixes for it (5.34) I'm going to try that. In the past month I've only crash/dumped once. Before SP1 it happen more often. I going to try the defrag program mentioned, if I can't get Speed Disk to work properly.

Thanks

All

 

[isepiq]

Ok, you have one more nortorious problem on your system: Roxio Easy CD Creator. Take a look at sites like vcdhelp.com etc., and you will find that that, and the cd burner program built into windows xp cause a lot of problems. Just about everyone turns off the build in progy in XP, and NEVER installs Easy CD. The best two programs for burning are Clone CD for making backup copies of your CD's, and Nero burning Rom for making music, video, and data CD's

Do NOT try to make Norton System Works or Utilites (any of them) work on your system except for Ghost, that one works too (I forgot they put out Ghost). Diskeeper is the last Defrag progy you will ever need, and the people are constantly making it better and releasing free updates for the progy.

IMHO
isepiq

 

[yinrunning]

Sorry, but that's horrible advice. There's nothing wrong with SystemWorks. Been using it since Win98, and I've never had a single problem with it. No, it doesn't fix every problem there is, and there are most certainly other viable solutions to the kinds of things it deals with, but there's nothing wrong with SystemWorks. Run WinDoctor and CleanSweep daily and you'll eliminate 90% of the easy problems that will ever crop up in XP. Run a virus scan and speed disk once a week, and there goes another 5%. Toss in Ad-Aware, a pop-up blocker and a software firewall and you've pretty much eliminated every minor problem your winbox is gonna run into. The medium/hard/crazy problems with a box can't be solved by any of these methods, (except viruses and hacking I guess), but those kinds of things happen so much less frequently and there's so little else you can do to prevent them that at least when they do come up, you know you've got an actual issue. ActiveX/COM controls go bad on windows DAILY. Let Windoctor deal with it so you don't have to.