[The Reaper]

I desperately need assistance
My computer has been experiencing random shutdowns, overheating, blue error screens(a few times but has ceased) and just strange overall activity.

Some of the error messages:

PAGE_FAULT_IN_NONPAGED_AREA
CRITICAL_OBJECT_TERMINATION
DRIVER_POWER_STATE_FAILURE(3 times)
THREAD_STUCK_IN_DEVICE_DRIVER
UNEXPECTED_KERNEL_MODE_TRAP

I think I have the driver names to go along with these titles.

Someone please come to my rescue!

[Advertisements]

Hello The Reaper.... Welcome to
GeeksToGo,


I'm sorry to hear about your issue. We will try to help you resolve this as soon
as possible.

• Please understand we are all volunteers and we are not here all the time.
• Sometimes it may be a extended amount of time to get back to you. If it has been
  more then 3 days please shoot me a PM and I will try to get back to you quickly
  then.
• Please do the following and supply the requested information as needed. If you
  don't understand my instructions please ask and I will try to explain them
  clearer for you.
• Do not attempt any steps unless instructed or ask before to
  make sure they will not cause any further issues.

First let's take a look at the actual error messages by doing the following.

• Please download the Event Viewer Tool by Vino Rosso VEW and save it to your Desktop:
• Double-click VEW.exe
• Under 'Select log to query', select (as appropriate):
  
  • Application
  • System
• Under 'Select type to list', select (as appropriate):
  
  • Error
  • Information
  • Warning

Then use the 'Date of events' or 'Number of events' as follows:

Either:

• Click the radio button for 'Number of events'
  Type 3 in the 1 to 20 box (or any number from 1 to 20)
  Then click the Run button.
  Notepad will open with the output log.
  
  
• Click the radio button for 'Date of events'
  In the From: boxes type today's date (presuming the crash happened today) 13 07 2009
  In the To: boxes type today's date (presuming the crash happened today) 13 07 2009
  Then click the Run button.
  Notepad will open with the output log.

Please post the Output log in your next reply


Then let's take a look at your heat and voltages by doing the following:

Download Speedfan (The download link is to the right), and install it. Once it's installed, run the program and post here the information it shows.
The information I want you to post is the stuff that is circled in the example picture I have attached.
To make sure we are getting all the correct information it would help us if you were to attach a screenshot like the one below of your Speedfan results.

To do a screenshot please have click on your Print Screen on your keyboard.

• It is normally the key above your number pad between the F12 key and the Scroll Lock key
• Now go to Start and then to All Programs
• Scroll to Accessories and then click on Paint
• In the Empty White Area click and hold the CTRL key and then click the V
• Go to the File option at the top and click on Save as
• Save as file type JPEG and save it to your Desktop
• Attach it to your next reply

Last but not least let's get a look at your system itself:


Download and install Free Everest Home Edition
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.
Click the + by computer, click on Sensor. Get a screenshot and post it so I can check your temps and voltages...


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"

[rshaffer61]

Hello The Reaper.... Welcome to
GeeksToGo,


I'm sorry to hear about your issue. We will try to help you resolve this as soon
as possible.

• Please understand we are all volunteers and we are not here all the time.
• Sometimes it may be a extended amount of time to get back to you. If it has been
  more then 3 days please shoot me a PM and I will try to get back to you quickly
  then.
• Please do the following and supply the requested information as needed. If you
  don't understand my instructions please ask and I will try to explain them
  clearer for you.
• Do not attempt any steps unless instructed or ask before to
  make sure they will not cause any further issues.

First let's take a look at the actual error messages by doing the following.

• Please download the Event Viewer Tool by Vino Rosso VEW and save it to your Desktop:
• Double-click VEW.exe
• Under 'Select log to query', select (as appropriate):
  
  • Application
  • System
• Under 'Select type to list', select (as appropriate):
  
  • Error
  • Information
  • Warning

Then use the 'Date of events' or 'Number of events' as follows:

Either:

• Click the radio button for 'Number of events'
  Type 3 in the 1 to 20 box (or any number from 1 to 20)
  Then click the Run button.
  Notepad will open with the output log.
  
  
• Click the radio button for 'Date of events'
  In the From: boxes type today's date (presuming the crash happened today) 13 07 2009
  In the To: boxes type today's date (presuming the crash happened today) 13 07 2009
  Then click the Run button.
  Notepad will open with the output log.

Please post the Output log in your next reply


Then let's take a look at your heat and voltages by doing the following:

Download Speedfan (The download link is to the right), and install it. Once it's installed, run the program and post here the information it shows.
The information I want you to post is the stuff that is circled in the example picture I have attached.
To make sure we are getting all the correct information it would help us if you were to attach a screenshot like the one below of your Speedfan results.

To do a screenshot please have click on your Print Screen on your keyboard.

• It is normally the key above your number pad between the F12 key and the Scroll Lock key
• Now go to Start and then to All Programs
• Scroll to Accessories and then click on Paint
• In the Empty White Area click and hold the CTRL key and then click the V
• Go to the File option at the top and click on Save as
• Save as file type JPEG and save it to your Desktop
• Attach it to your next reply

Last but not least let's get a look at your system itself:


Download and install Free Everest Home Edition
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.
Click the + by computer, click on Sensor. Get a screenshot and post it so I can check your temps and voltages...


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"

[The Reaper]

Thank you so much for the quick response
I will follow these instructions immediately and reply back
thanks again

[The Reaper]

Hey I did all of the above but how is this going to help me?
None of the programs seem effective...
thanks

p.s. I LOVE DAY OF THE DEAD! I met George Romero 4 days ago...

Edited by The Reaper, 23 October 2010 - 04:43 PM.

[amw_drizz]

The way this helps us is it allows us to get an understanding of the current state of your computer. Be it running hot, programs indicative of spyware/adware, out dated drivers causing system instability, etc. This allows us to provide better assistance to you so you can get your computer fixed easier and quicker.

So please with your next post attache the requested from rshaffer61 so we can get to the root cause of all your problems with your computer.

[rshaffer61]

Hey I did all of the above but how is this going to help me?
None of the programs seem effective...

I don't see any of the requested logs that the instructions say to attach?
There should be the :

• Event Viewer log
• Speedfan screenshot
• Everest log

[The Reaper]

Ok here it is...
thanks





Vino's Event Viewer v01c run on Windows Vista in English
Report run at 23/10/2010 4:41:39 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 23/10/2010 2:17:25 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nero\Nero 9\Nero Recode\Recode.exe.Manifest".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest. Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Log: 'Application' Date/Time: 23/10/2010 2:17:25 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nero\Nero 9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Log: 'Application' Date/Time: 23/10/2010 1:53:17 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nero\Nero 9\Nero Recode\Recode.exe.Manifest".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest. Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Log: 'Application' Date/Time: 23/10/2010 1:53:17 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nero\Nero 9\Nero Recode\Recode.exe.Manifest".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest. Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Log: 'Application' Date/Time: 23/10/2010 1:53:16 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nero\Nero 9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 23/10/2010 8:32:02 PM
Type: Information Category: 0
Event: 8194 Source: System Restore
Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = ).

Log: 'Application' Date/Time: 23/10/2010 8:31:43 PM
Type: Information Category: 0
Event: 8194 Source: System Restore
Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = Windows Modules Installer).

Log: 'Application' Date/Time: 23/10/2010 8:31:12 PM
Type: Information Category: 0
Event: 10001 Source: Microsoft-Windows-RestartManager
Ending session 1 started 2010-10-23T20:22:00.887Z.

Log: 'Application' Date/Time: 23/10/2010 8:31:12 PM
Type: Information Category: 0
Event: 1042 Source: MsiInstaller
Ending a Windows Installer transaction: C:\bcf9aad70e5d7760767dc0a9b7\netfx_Core_x64.msi. Client Process Id: 548.

Log: 'Application' Date/Time: 23/10/2010 8:31:12 PM
Type: Information Category: 0
Event: 1033 Source: MsiInstaller
Windows Installer installed the product. Product Name: Microsoft .NET Framework 4 Client Profile. Product Version: 4.0.30319. Product Language: 0. Installation success or error status: 0.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 23/10/2010 2:15:21 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-3678687958-66225729-2022923932-1000:
Process 316 (\Device\HarddiskVolume1\Program Files\COMODO\COMODO Internet Security\cmdagent.exe) has opened key \REGISTRY\USER\S-1-5-21-3678687958-66225729-2022923932-1000


Log: 'Application' Date/Time: 22/10/2010 1:23:22 AM
Type: Warning Category: 0
Event: 20 Source: Google Update
The event description cannot be found.

Log: 'Application' Date/Time: 22/10/2010 12:23:14 AM
Type: Warning Category: 0
Event: 20 Source: Google Update
The event description cannot be found.

Log: 'Application' Date/Time: 21/10/2010 11:23:20 PM
Type: Warning Category: 0
Event: 20 Source: Google Update
The event description cannot be found.

Log: 'Application' Date/Time: 21/10/2010 10:28:12 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-3678687958-66225729-2022923932-1000:
Process 3228 (\Device\HarddiskVolume1\Windows\System32\msiexec.exe) has opened key \REGISTRY\USER\S-1-5-21-3678687958-66225729-2022923932-1000


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/10/2010 1:54:03 PM
Type: Error Category: 0
Event: 12 Source: PlugPlayManager
The device 'JMB38X xD Host Controller' (PCI\VEN_197B&DEV_2384&SUBSYS_30FB103C&REV_00\4&2a995034&0&0428) disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 23/10/2010 1:54:03 PM
Type: Error Category: 0
Event: 12 Source: PlugPlayManager
The device 'JMB38X MS Host Controller' (PCI\VEN_197B&DEV_2383&SUBSYS_30FB103C&REV_00\4&2a995034&0&0328) disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 23/10/2010 1:54:03 PM
Type: Error Category: 0
Event: 12 Source: PlugPlayManager
The device 'JMB38X SD Host Controller' (PCI\VEN_197B&DEV_2381&SUBSYS_30FB103C&REV_00\4&2a995034&0&0228) disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 23/10/2010 1:54:03 PM
Type: Error Category: 0
Event: 12 Source: PlugPlayManager
The device 'JMB38X SD/MMC Host Controller' (PCI\VEN_197B&DEV_2382&SUBSYS_30FB103C&REV_00\4&2a995034&0&0028) disappeared from the system without first being prepared for removal.

Log: 'System' Date/Time: 22/10/2010 8:26:51 PM
Type: Error Category: 0
Event: 12 Source: PlugPlayManager
The device 'JMB38X xD Host Controller' (PCI\VEN_197B&DEV_2384&SUBSYS_30FB103C&REV_00\4&2a995034&0&0428) disappeared from the system without first being prepared for removal.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/10/2010 8:41:17 PM
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Windows Modules Installer service entered the stopped state.

Log: 'System' Date/Time: 23/10/2010 8:33:27 PM
Type: Information Category: 1
Event: 19 Source: Microsoft-Windows-WindowsUpdateClient
Installation Successful: Windows successfully installed the following update: Microsoft .NET Framework 4 Client Profile for Windows Vista x64-based Systems (KB982670)

Log: 'System' Date/Time: 23/10/2010 8:33:27 PM
Type: Information Category: 1
Event: 28 Source: Microsoft-Windows-WindowsUpdateClient
Automatic Updates is now resumed.

Log: 'System' Date/Time: 23/10/2010 8:32:47 PM
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Portable Device Enumerator Service service entered the stopped state.

Log: 'System' Date/Time: 23/10/2010 8:32:46 PM
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/10/2010 8:31:41 PM
Type: Warning Category: 0
Event: 4374 Source: Microsoft-Windows-Servicing
Windows Servicing identified that package Microsoft-Windows-Webservices-Package-Package-zh-hk-MiniLP(Update) is not applicable for this system

Log: 'System' Date/Time: 23/10/2010 8:31:41 PM
Type: Warning Category: 0
Event: 4374 Source: Microsoft-Windows-Servicing
Windows Servicing identified that package Microsoft-Windows-Webservices-Package-Package-zh-tw-MiniLP(Update) is not applicable for this system

Log: 'System' Date/Time: 23/10/2010 8:31:41 PM
Type: Warning Category: 0
Event: 4374 Source: Microsoft-Windows-Servicing
Windows Servicing identified that package Microsoft-Windows-Webservices-Package-Package-zh-cn-MiniLP(Update) is not applicable for this system

Log: 'System' Date/Time: 23/10/2010 8:31:41 PM
Type: Warning Category: 0
Event: 4374 Source: Microsoft-Windows-Servicing
Windows Servicing identified that package Microsoft-Windows-Webservices-Package-Package-uk-ua-MiniLP(Update) is not applicable for this system

Log: 'System' Date/Time: 23/10/2010 8:31:40 PM
Type: Warning Category: 0
Event: 4374 Source: Microsoft-Windows-Servicing
Windows Servicing identified that package Microsoft-Windows-Webservices-Package-Package-tr-tr-MiniLP(Update) is not applicable for this system







BlueScreen:

Dump file: Mini102110-01.dmp
Bug check string: PAGE_FAULT_IN_NONPAGED_AREA
caused by driver: ntoskrnl.exe
caused by address: ntoskrnl.exe+5a4d0
Full path: C:\Windows\Minidump\Mini102110-01.dmp


Mini102010-01.dmp
CRITICAL_OBJECT_TERMINATION
ntoskrnl.exe
ntoskrnl.exe+5a4d0
C:\Windows\Minidump\Mini102010-01.dmp

Mini092110-01.dmp
DRIVER_POWER_STATE_FAILURE
usbfilter.sys
usbfilter.sys+f1729060
C:\Windows\Minidump\Mini092110-01.dmp


Mini070210-03.dmp
DRIVER_POWER_STATE_FAILURE
msrpc.sys
msrpc.sys+386fa30
C:\Windows\Minidump\Mini070210-03.dmp

Mini070210-02.dmp
DRIVER_POWER_STATE_FAILURE
ntoskrnl.exe
ntoskrnl.exe+5a4d0
C:\Windows\Minidump\Mini070210-02.dmp


Mini070210-01.dmp
UNEXPECTED_KERNEL_MODE_TRAP
ntoskrnl.exe
ntoskrnl.exe+5a4d0
C:\Windows\Minidump\Mini070210-01.dmp

Mini061210-01.dmp
THREAD_STUCK_IN_DEVICE_DRIVER
dxgkrnl.sys
dxgkrnl.sys+72af
C:\Windows\Minidump\Mini061210-01.dmp

Attached Thumbnails

• 

[The Reaper]

...

Edited by The Reaper, 24 October 2010 - 09:37 AM.

[rshaffer61]

WOW your errors are all over the place. I see one that may be the root though so I'm going to start with that.

If you've recently been getting errors with msrpc.sys it's recommend you unisntall and/or re-install any programs recently that may have generated this error. If this does not resolve your issue or you have not installed any program recently try recovering Windows back to a recent backup of Windows.

Based on this error I see here:

Mini070210-03.dmp
DRIVER_POWER_STATE_FAILURE
msrpc.sys
msrpc.sys+386fa30
C:\Windows\Minidump\Mini070210-03.dmp

Also the first error I see here:

Log: 'Application' Date/Time: 23/10/2010 2:17:25 PM
Type: Error Category: 0
Event: 78 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Nero\Nero 9\Nero Recode\Recode.exe.Manifest".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest. Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

The fact there have been 5 instances just on the 23rd alone, I would suggest uninstalling Nero first. Backup your data in Nero to your desktop or another drive so you don't lose it. Then uninstall it and see if the issue continues.

Also I would like you to do the following:

Go to

Start and then to Run
Type in Chkdsk /r Note the space between k and /
Click Enter ...It will probably ask if you want to do this on the next reboot...click Y
If the window doesn't shutdown on its own then reboot the system manually. On reboot the system will start the chkdsk operation
This one will take longer then chkdsk /f

Note... there are 5 stages...
It may appear to hang at a certain percent for a hour or more or even back up and go over the same area...this is normal...
DO NOT SHUT YOUR COMPUTER DOWN WHILE CHKDSK IS RUNNING OR YOU CAN HAVE SEVERE PROBLEMS
This can take several hours to complete.
When completed it will boot the system back into windows.

Let me know if this fixes the problem

[The Reaper]

Where is this file, msrpc.sys, commonly found?

[rshaffer61]

Microsoft Windows kernel RPC that should be located in the C:\Windows\System32\drivers directory.

[The Reaper]

IS there some sort of action I should take for that?
I just got finished with the "Chkdsk" and nothing seems different... (how would I know?) lol
still seems to be running high and hot.

[rshaffer61]

If chkdsk ran correctly and you watched it then it would have showed any errors and if it fixt them.

still seems to be running high and hot.

Explain what you mean by high and hot please

[rshaffer61]

What is running hot?
Cpu
HD
Optical Drive
Video Card
PSU
Case

[rshaffer61]

Another thing... when was the last time you opened the system and cleaned all the dust using a can of compressed air?
Is this a laptop or desktop?