Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

System dumps to memory - blue screen


  • Please log in to reply

#1
crashedpilot

crashedpilot

    Member

  • Member
  • PipPip
  • 28 posts
I am running W2K with IE6 on a Dell600 laptop P3. Windows updater just automatically ran and immediately after the system crashed. The blue screen read:

***STOP: 0x000000IE
(0xC0000006, 0x80548E93, 0x00000000, 0x77FBE834) KMODE-EXCEPTION-NOT-HANDLED

***Address 80548E93 base at 80400000, Datestamp 422258bd8 - ntoskrnl.exe

This has happened several times recently, but I have eventually managed to reboot. I have run symantec NAV2004 and am virus clear. Also AdAware SE and no nasties.

Here's the log:

Logfile of HijackThis v1.98.2
Scan saved at 07:54:20, on 12/05/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Ati2evxx.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Lightning Download\Lightning.exe
C:\Program Files\Lightning Download\Lightning.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\HistoryKill\histkill.exe
C:\WINNT\system32\internat.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\DigiPortal Software\ChoiceMail\ChoiceMail.exe
C:\Program Files\DigiPortal Software\ChoiceMail\ChoiceMail.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HistoryKill\hkPopupKiller.exe
C:\Program Files\IPWireless Inc\IPWireless PC Software\UEStatus.exe
C:\PROGRA~1\NORTON~1\navw32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Norton AntiVirus\OPScan.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX01.714\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IEWatchObj Class - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINNT\system32\IETie.dll (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {F1FF080D-12A3-439A-A2EF-4BA95A3148E8} - (no file)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Lightning Download] C:\Program Files\Lightning Download\Lightning.exe
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [HistoryKill] C:\Program Files\HistoryKill\histkill.exe /startup
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [ChoiceMail] "C:\Program Files\DigiPortal Software\ChoiceMail\ChoiceMail.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.t...all/xscan60.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguar...ion/Install.cab
O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://www.streamaud...d/ccpm_0237.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zone...ee/cm/ICSCM.cab
O16 - DPF: {24D1BDCE-D835-11D6-BF84-0050047EA0E7} (BlueStream_Flash Class) - http://www.rovion.co...rols/Rovion.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.r...ip/RdxIE601.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivi...n/ravonline.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pdownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C59F4B46-4C82-4F0C-9DAF-02FFE64491F4}: NameServer = 219.76.66.69 219.76.99.71

Please can someone advise problem and solution? Thanks
  • 0

Advertisements


#2
-=jonnyrotten=-

-=jonnyrotten=-

    Member 2k

  • Retired Staff
  • 2,678 posts
Do you recall what updates were installed exactly? I would suggest going to control panel, add/remove programs and find the windows updates that were recently installed and uninstall them and try to reboot again. If you do not remember which updates were installed then let me know and we will try something different.

-=jonnyrotten=- :tazz:
  • 0

#3
crashedpilot

crashedpilot

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hi again. How's Hawaii? R U up late or early? Major probs now. Took me about 2 hours to fire this up with a disc. I'm getting a new Bluescreen notificatio 0x00000077 Kernel_stack_inpage_Error. Also in the reboot(s) I got a black page saying no hard disc present!????
Looked at the latest updates but, as there are no date stamps listed, it's impossible to know which was the last-there's about 20! Hang in there for my reply, this thin's so unstable I may not get back right away. Its 2140 local time here(UK). Talk soon I hope.
  • 0

#4
-=jonnyrotten=-

-=jonnyrotten=-

    Member 2k

  • Retired Staff
  • 2,678 posts
Try Safe Mode. Press F8 continuosly immediately after your initial boot screen turns black. Then choose Safe Mode from the list. Is that stable?

-=jonnyrotten=- :tazz:
  • 0

#5
crashedpilot

crashedpilot

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Already tried in the last boot up session. Hung on start page - all keys "peeped" but nothing happened. I've crashed again since my last posting. Hope this gets thru
  • 0

#6
-=jonnyrotten=-

-=jonnyrotten=-

    Member 2k

  • Retired Staff
  • 2,678 posts
Wow, this is not looking good. I've run out of ideas for this right now. How long can you stay online? Try this:

Download this file and place a floppy in your floppy drive. Now double click the file and let it create a boot disk. Now reboot the computer with the floppy in the drive, and let windows boot from the floppy. For now I have another idea, but we I need to get approval on this one before I recommend it. I'll be back.

-=jonnyrotten=- :tazz:
  • 0

#7
crashedpilot

crashedpilot

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hello again. System crashed completely after your last post. Been to doctor who found bad connection between hard drive and mother board. $60 down and then I started to get bluescreens again :tazz: . The faulty connection was, I was told, the reason for the black screen "no bootable hard disk available". However, this has happened twice over the last few days. I am still able to boot up again without the floppy. The blue screen I am getting is 0x0000007A:KERNEL_DATA_INPAGE_ERROR and also 0x00000077: KERNEL_STACK_INPAGE_ERROR. In the meantime I have updated the flash BIOS from Dell, but this does not seem to have any effect on these virtual memory dumps. Virtual memory is set at 384-768MB range. I can provide Everest and Hi-Jack This log if required. This is driving me nuts ;)
  • 0

#8
thomasz

thomasz

    New Member

  • Member
  • Pip
  • 1 posts
I just got this same problem. I do not have a fix yet.

I ran "Liveupdate" in Symantic Systemworks 2002 on one computer (among other things,) and I got the error. In preparing to go on the net on another machine to search for something on this problem, I ran "Liveupdate" on that machine and voila! I have isolated my problem. Now to find the cure. Both machines are using Windows 2000.
Tom
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP