Memory_management windows xp error code after first boot

Yes we need the exact phrase to do a search.

gonzal13(joe)

You got a bunch of USB devices by any chance?

Whenever windows crashes with blue screen, a system event 1001 record and a minitdump is created.
Record 1011 has the bugcheck code and the bugcheck code parameter list which are very useful to diagnostic your problem.
Control Panel -> System Adminstrative Tools -> Event Viewer -> System -> Record 1001 (ie sysddump). Copy the content of the record 1001 log into clipboard. Paste them back here.

Copy of log:

Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            21/11/2004
Time:            11:26:30
User:            N/A
Computer:      KTU
Description:
Error code 0000001a, parameter1 00041284, parameter2 0206d001, parameter3 00000f07, parameter4 c0503000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 30 30 30 30 30 30 31    0000001
0020: 61 20 20 50 61 72 61 6d   a  Param
0028: 65 74 65 72 73 20 30 30   eters 00
0030: 30 34 31 32 38 34 2c 20   041284,
0038: 30 32 30 36 64 30 30 31   0206d001
0040: 2c 20 30 30 30 30 30 66   , 00000f
0048: 30 37 2c 20 63 30 35 30   07, c050
0050: 33 30 30 30               3000    

@jatcan: I have an external harddrive connected via usb, but the problems already occured before I had the hd.

on your first boot can you run hijackthis http://www.spychecker.com/download/download_hijackthis.html then save the logfile and past the contents here

First thing I'll do when I'm back from work.

What motherboard and what version of USB support does it have...what version of USB is the Hard drive using...the problem may or may not be related to the USB chipset driver, the chipset support on the motherboard and have nothing at all to do with the drive. For instance if one were to have an Asus A7n8x-x mboard and install a USB 2.0 driver without installing a certain USB service pack from MS, USB devices attached or not, they may have, well, freezes or memory errors related to the USB chipset driver, not the USB device...it affects any Asus based board from A7V333 up to the A7n8x-x...if the USB 2.0 driver is installed with out the MS patch strange things may happen..

that is why I asked, it IS a long shot I'll admit.

Jatcan

I am also seeing a LOT of people who have these types of errors when video memory on their video cards goes bad..have you another video card lying around yuo could try out as a test?

Jatcan

Try this though also:

Boot into safe mode with command prompt only, once there type this into the command window:

appwiz.dll

hit enter, use add/remove programs to uninstall all norton or symantec products. Once that is done, reboot normally and test run it...apparently the issue is quite common with nnorton users, something I didn't know until now. This little culprit here: ccApp.exe from verisons velow 2005 is causing some nightmares and as a amatter of fact I remember it causing some troubles on a large network where Norton was being deplaoyed to 15,000 PC's, the ehklpdesk ahd a very busy three weeks removing norton from over 5000 PC's where ccapp.exe was casuing the PC's to NOT boot in normal mode...can you run the PC for any length of time in safe mode?

Jatcan

As you can see , memory erros are hard to pin point: there are so many things it could be...

The following is a freely distributed memory tester. You can download an iso image for buring to CD-it is NOT very big(a few KB), but you would need a stable internet conection and PC to do it with, then you ned to burn it to cdrom. There are also some breif explanations and troubleshooting tips for memory troubleshooting.....I suspect scanning you system with this tool will turn up nothing, but I always learned that you eliminate hardware as the cause of a problem first, then move onto suspected software cause's...so here ya go:

http://www.memtest86.com/#trouble

Jatcan

Here's the log from HijackThis:

Logfile of HijackThis v1.97.7
Scan saved at 19:29:53, on 22/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\PowerDVD\PDVDServ.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\Program Files\Winamp\Winampa.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Servant Salamander 2.5 beta 6\SALAMAND.exe
C:\Download\software\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096118571259
O16 - DPF: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_05) -

@Jatcan: Motherboard is Abit KX7-333R and supports USB 1.0. The external hard drive is not really an external hard drive, but a hard drive in an external enclosure with usb 2.0. Not long ago I replaced my video card (gf4 ti4200) with a gf4 ti4600. I have also tried a while a very old videocard (riva tnt2), and always the same problem. I have no norton/symantec products, but I will give safe mode a shot.

Have a look at some of these, but DO do the memtest scan on your system...

Event ID: 1003
Source       System
Type       Error
Description       Error code <error code>, parameter1 <value>, parameter2 <value>, parameter3 <value>, parameter4 <value>.
Things to understand       What is the Nonpaged memory pool?
What is an IRQL?
What are the Windows error codes?
What is the kernel?  
Comments       Adrian Grigorof (Last update 10/6/2003):
Most of the problems leading to this event indicate faulty hardware, bugs in device drivers or incompatible hardware.

A troubleshooting approach from a newsgroup post: "Boot from CD to start the Recovery Console, then read setuplog.txt, and setupapi.log, to see what happens when it boots.

Another newsgroup posts suggests that this error requires the debugger to look at the parameters of the error. Usually this is some hardware driver failure. Running 'verifier' may identify it. Article Q244617 - How to Use Driver Verifier to Troubleshoot Device Drivers in Windows 2000 may help."

Error code 0000000a = "IRQL_NOT_LESS_OR_EQUAL" - The error that generates this bug check usually occurs after the installation of a faulty device driver, system service, or BIOS. For additional details see the link to error code 0x0000000a.

Error code 00000020 = "KERNEL_APC_PENDING_DURING_EXIT" - May indicate a bug in a device driver. For additional details see the link to error code 0x00000020.

Error code 00000050 = "PAGE_FAULT_IN_NONPAGED_AREA"  - See the link to error code 00000050 for information about what may cause this.

Error code 0000009c = "MACHINE_CHECK_EXCEPTION" - This indicates that a fatal machine check exception has occurred. See also Q162363 and error code 0x0000009c.

Error code 000000ce = "DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS" - This indicates that a driver failed to cancel pending operations before unloading. If the driver responsible for the error can be identified, its name is printed on the blue screen.

Error code 000000ea = "THREAD_STUCK_IN_DEVICE_DRIVER" - A device driver is spinning in an infinite loop, most likely waiting for hardware to become idle. This usually indicates problem with the hardware itself, or with the device driver programming the hardware incorrectly. In many cases this is the result of a bad video card or a bad display driver.

Error code 1000007f = "UNEXPECTED_KERNEL_MODE_TRAP_M" - The first parameter displayed on the blue screen specifies the trap number. Trap number 0x00000000, or Divide by Zero Error, may indicate memory corruption. Other hardware problems, or software failures can cause this error. See the the link to Bug Check codes for more explanations about various trap numbers.

Error code 1000008e = "KERNEL_MODE_EXCEPTION_NOT_HANDLED_M" - Most of newsgroup comments about this error point to faulty hardware or drivers. The hardware varies from modems, video cards, USB device to memory or sound cards. Sometimes it proves to be hardware that it is not compatible with Windows XP. Q310740 gives an example of this error occuring when and old Audigy sound card driver is installed.

Error code 100000be = "ATTEMPTED_WRITE_TO_READONLY_MEMORY" - This is issued if a driver attempts to write to a read-only memory segment. If the driver responsible for the error can be identified, its name is printed on the blue screen. A faulty device driver would typically be the cause of that. Also, potential file corruption.

Error code 100000ea = "THREAD_STUCK_IN_DEVICE_DRIVER_M" - This indicates that a thread in a device driver is endlessly spinning. See the information for 000000ea.

Error code 0000007F = "UNEXPECTED_KERNEL_MODE_TRAP" - From a newsgroup post: "According to Q104292, there are two known causes for this error:
- corrupt system files, especially file system files
- mismatched memory or motherboard problem
This error generally occurs during boot, with no parameters specified except the first one. Suggested troubleshooting is to run repair to check for corrupt files, then low-level hardware diagnostics (including diagnosing RAM and the motherboard)." See also the link to error code 0x0000007F.

Error code 0x10000050 = Some information about this type of error can be found via the error code 0x10000050 link.

Ronald (Last update 10/4/2004):
- Error code: 0xc0000005 = STATUS_ACCESS_VIOLATION - My computer started to reboot randomly after I installed Windows XP SP2. After searching the Web, I found this to be related to a new addition in Windows XP brought by SP2, namely Data execution prevention (DEP). If you have hardware or software that does not work properly after the installation of SP2 then deactivate DEP. You do that in the “boot.ini” file with the “/noexecute=AlwaysOff” switch. After I modified the “boot.ini” file accordingly, this problem ceased to reappear. See the link to “Memory Protection Technologies in WinXP SP2” for more details on this issue.

Charlton Wang (Last update 8/9/2004):
From the net, someone mentioned setting the Virtual memory to 0, reboot and delete the pagefile.sys file. Then set the virtual memory back to normal. It worked for me. See Q255205 for information on how to delete the pagefile.sys file in Recovery Console.

Ionut Marin (Last update 8/9/2004):
- Error code: 0x00000050 = "PAGE_FAULT_IN_NONPAGED_AREA" - See Q817197.
- Error code: 0x0000001E - See Q820767 and Q822563.
- Error code: 0x000000A5 - See Q831691.
- Error code: 0x000000d1 = "DRIVER_IRQL_NOT_LESS_OR_EQUAL" - See Q837432 and the link to Error code 0x000000D1.
- Error code: Error code 0x000000c5 = DRIVER_CORRUPTED_EXPOOL - See the link to "Error code 0x000000c5" for details on this error code.
- Error code: 0x000000D5 - See Q870895 and Q870896.
- Error code: 0x0000007f - See Q870908.

See the link to "Windows XP Stop Errors" and "Stop Messages" for information regarding error codes.

LHI (Last update 7/21/2004):
If you are running on the following hardware: "HP ProLiant DL380 G3", then HP suggests that it can be solved by a BIOS update. See "HP ProLiant DL380 G3 BIOS Update" to get the update.

Nougat (Last update 7/13/2004):
- Error code: 0xD1 - See Q829120 for a hotfix applicable to Microsoft Windows 2000 and to Microsoft Windows XP.

Wendi Fisher (Last update 5/16/2004):
On my Alienware Area 51 M laptop computer, this error was generated due to a conflict between the Linksys Wireless -G notebook adapter and the native Windows XP wireless manager. If you get this error and you have one of these cards you need to call Linksys tech support and they will walk you through installing the drivers for the card without installing the control utility, which is what conflicts with Windows XP.

Anonymous (Last update 5/14/2004):
See Q322205 for info on how to troubleshoot Hardware and Software Driver problems in Windows XP.

Anonymous (Last update 11/10/2003):
In my case, the error occurred after installing Kingston HyperX KHX3200/512 in a P4C800 and activated performance mode in BIOS. After I disabled Performance Mode, the problem disappeared.

Christian Garbass (Last update 10/17/2003):
Error code 0000007f = "UNEXPECTED_KERNEL_MODE_TRAP" - When I remote controlled a machine with Altiris Carbon Copy 5.8.410 and tried to open a shortcut on the desktop of the controlled machine it caused the machine to hang up and to reboot.

Isd503 (Last update 9/22/2003):
Error code 0000007f = "UNEXPECTED_KERNEL_MODE_TRAP" - This error surfaced on my machine running Windows XP Professional, SP-1. I tried the suggestion of setting the virtual memory to zero and rebooting. After logon, I recreated the page file and the problem dissapeared.

Adrian Florin Moisei (Last update 5/15/2003):
Error code 000000d1 = "DRIVER_IRQL_NOT_LESS_OR_EQUAL". A faulty device driver would typically be the cause of that. See also the comments for event id 1001 from "Save Dump".

Error code 000000c2 = "BAD_POOL_CALLER" - See Q265879 link below.
Error code 00000044 = "MULTIPLE_IRP_COMPLETE_REQUESTS" - See Q196022, Q296734 and Q294876.

PaulD
Windows XP SP1 resolve this issue. See Q317277.

Birol | AKBAY
In my case, this error for a motherboard using Bus Mastering and a NIC that does not support Bus Mastering. When Bus mastering is disabled from BIOS, this type of error went away.

Anonymous
With error code 100000ea, this occured in my case due to a faulty video card.

Axton
Turned out to be BlackIce v2.9 causing blue screen.  

How long have you been using Salamander? AND, did you have these problems BEFORE the installation of the new video card?

Cheers,

Jatcan

You know the easy way to do this would be to simply open msconfig, click the startup tab and uncheck everything from there, then click the services tab, check the hide microsoft services checkbox, then click the disable all button, there should only be non-ms services viewable now, , ok apply everything and reboot,,,,,test....if it happens with none of these programs running we can ASSUME that none of these programs are causing the problem. You do have a bunch of non-essential programs starting but I've seen much worse. so, we may as well clean it out while we are here and then test:

.Back up your registry please. Start Button=>run=>type in "regedit",click OK=>file menu=>export registry=>browse to the root of any drive(C:\ will do nicely)=>name it appropriately(regbac.reg ?)=>click save. When it is done saving then proceed.....remove these.

O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (will return, but it's fun trying;-)
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096118571259 (turning off autoupdates will ensure this does not return)

If you need any of these programs just get them on the Start Menu. The excel extra toolbar---what is that exactly---how long have you been using it---you would need to re-check this entry to have it run from boot again, not sure if it can be activated from the start menu.

Some of the programs in the above list have their own controls for startuing from bootup. Winamp for instcance will re-write the winampa.exe entry into your start menu unless you use winamp to disable the "start from boot" option. As will itunes and qttask...I am sure some others will also, point is, you should run each one of them and disable the start from boot option in them unless it is absolutely necessary that you have them run from boot...

Cheers,

jatcan

Oh and remove the hard drive from your configuration temporarily, if you can.
J

Ran memtest a while ago, no probs. Been using Salamander for a year now, problems occured before I used it (Now you think: "Damn, how long is he having those problems?!" Well, booting twice a system, that's something you learn to live with :) Anyway, now i want a stable system after the first boot). And I also had the same problems with the old video card.

Now I'm going to try the software-related solutions. Has to be software-related, I think. Why else would the system stay stable after a second boot?

LOL-yes, I would never go that long without addressing the problem but I've had friends call me after living with something for more than a year or so; it will eventually drive a person nuts, thats why I always address it right away, I'm already half nuts-wouldn't take much to make me fully crazy :-) Right Crazy? Where is Crazy anyways, he is usually right in on questions like this one.

Cheers,

Jatcan

Two hours gone by since I booted the system without the applications, you said to disable in msconfig, and still no crash. So it looks promising. Tomorrow I will continue testing after work, and post my results later on.

OK-so, if the error does not return, then we have to enable each of these programs one by one and test in between until we nab the nasty little culprit. I would start with re-enabling the non-MS services as they are an unlikely cause and most likely you have fewer of them than you do programs starting from boot.

Cheers,

jatcan

Do you use outpost firewall? If no, what firewall do you use?

System is running stable since 07.00pm this evening.

Hijackthis log:

Logfile of HijackThis v1.97.7
Scan saved at 22:24:30, on 23/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Servant Salamander 2.5 beta 6\SALAMAND.exe
C:\Download\software\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096118571259
O16 - DPF: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_05) -

Couldn't get rid of the excel entry and the windowsupdate entry is still there, despite the fact that I have disabled automatic updates. I have only unchecked the programs in msconfig. I don't have to change the registry?

Following your advice, I will now enable the non-MS services, shutdown the pc, and test after first boot. I put my money on daemon tools. I think he's causing all the troubles.

@cpc2004: On the pc where I have the probs, there's no firewall installed. It's behind another pc, that's serving as a router, and on that pc I have a firewall. But, like you can read in the past comments, we have narrowed the problem down to a list of suspects. The only thing that rests to do, is to find the guilty one.

You could be right. Yes after you find out which is the guilty suspect you can clean out the registry. Usually uninstalling the program or setting it's option for "start from boot" to disable is enough to remove the entry from the registry. If it comes right down to it, locating it's entry in the run key and deleting it is a simple matter most of the time.

It may still be possible to use Daemon Tools successfully on your PC, just not from bootup is all.

Cheers,

jatcan

Before I went off to work this morning, I booted my pc, and crash, boom, bang. A BSOD. So now we have only 2 suspects. The AVG (anti-virus) and the NVIDIA Display Driver service. I have disabled the last one, and I will test my system this evening.

What purpose has this service?

All those neat little things you can click on when you right click the nVidia system tray applet? They're controlled by the nVidia service.

If you don't use the system tray applet, you should disable it using the display properties--it uses approx. 2 mbs of ram from boot.

Cheers,

jatcan

System stays stable again, after disabling the Nvidia Display Driver Service. So I think we found the guilty one. Tomorrow evening I will run some last tests, to be 100% sure. After that I will accept one of jatcan's answers :)

Glad you found your culprit, happy that it is nothinhg REALLY important.

Cheers,

jatcan

Bad news. This morning my pc crashed again after first boot, but this time with windows xp error code PAGE_FAULT_IN_NONPAGED_AREA. Only the AVG Service was running. I have disabled it and will test again this evening. Looks like both services (AVG and NVIDIA) are causing troubles.

It may not even be software bud...but I guess we'll find out.

J

Can you attach the last minidump to any webspace so I can process the minidump and find out the culprit? You can find the minidump fron the folder \windows\minidump\*.dmp

How do you disable nVidia Display card?

you may have fulty ram on the vid card or the main ram all so a chkdsk on your hard drive wood be a good idea

another culprit may be a fulty power supply

chdsk on the hard drive will not test ram of any type...? and Yes, the power supply may be a culprit. You do not disable the nVidia display card, you disable the nVidia desktop management programs that run in the background and are accessible via the systray icon, disabled within display property's or maybe you might have to turn the service of by setting it to disabled...

Cheers,

Jatcan

I think you haven't disable nvidia display card and AV.

If you refer this case, the problem owner disable the AV software and actually the AV was still running. After I examine the minidump can confirm the culprit was the AV. The problem owner fixed the AV and the problem is resolved.
http://www.experts-exchange.com/Operating_Systems/Q_21203200.html

<chdsk on the hard drive will not test ram of any type...? >
i know i want him to test his hard drive as it may have bad sectors on it that windosw is trying to use
to test the ram use mem test http://www.memtest86.com/ or microsoft has a ram test program as well http://oca.microsoft.com/en/windiag.asp

ah yes-appologies.....couldn't hurt.

J

Just ran the windows memory test. Found no errors. One hour ago my pc crashed again after first boot, and both services (avg and nvidia) were disabled. Two days ago my system kept stable when both services were disabled! Main difference is that I now was running a seti, to give my pc more workload.

The dumps of today (this morning and the one 2 hours ago) can be found here:
http://users.pandora.be/haunted/Mini112504-01.dmp
http://users.pandora.be/haunted/Mini112504-02.dmp  

seems like your computer is crashing when its working hard so this must be a hard ware fault if the rams ok i wood look at the power supply cpu and motherboard in that order

But why does it stays stable (also when he's working hard) after a second boot ?

Makes sense to me.
I have a history of failing power supplies. Had to replace two in the last 3 years.
But then the cause of faillure was crystal clear. Pc refused to start when pushing the power button :)

512mb

I have a history of failing power supplies. Had to replace two in the last 3 years

that wood indicate a motherboard or wall socket fault do you have a serge protector something like this http://www.newegg.com/app/ViewProductDesc.asp?description=12-120-206&depa=0 if not its a very good idea to get one or a ups

Had to be more specific. The power supplies I had to change were on different configurations, but the pc's were always connected to the same wall socket via a surge protector supplying power to my pc, monitor, television and a lamp.

you may want to get the wall socket and surge protector tested at some point then but for now i still think its a psu do you have another one you can test with ?

I could take one out of another pc, but it will be one providing less power.

Looked up some old bills, and found out that this is already my second power supply in this pc.
Bought this pc in july 2002 and had my power supply already replaced june 2003. Was already forgotten that it failed so quick.

OPwer supply's are one of the most important and most negleted components of the personal PC bud. If you MUST get another spend the $100-$200 to get a GOOD one:

Like 480watt or 530watt Thermal take or the one I got, an Antec from a local PC store here:

http://pccyber.ca/scrItem.asp?product_subtypes_id=160&product_types_id=30&product_id=1404

Cheers,

J

Mine has 350W, and costed only 23,97 euro. Too cheap, to last long :)

It only takes 20 minutes to download and upgrade the nVidia display card driver. You can uninstall the new display card driver at any time. Upgrade display card driver is much easier, cheaper than install a power supply. It is worth while to try

LOL

Yes, agreed with cpc2004, cheaper to try a new display driver and who knows if it IS actually the display driver causing it,,,can't hurt..you can always roll back to the previous driver...

Cheers,

Jatcan

Reminds me of an OEM I know of putting 150watt power supply's into their PC's running 800Mhz cpu's and a bunch of USB and other devices supplied with the "deal"....no wonder thier call volumne for technical support went up drastically after that series release...ah well, the un-suspecting public thinks they're getting a deal when they buy that all in one PC for $395.00, LOL,,,yeah, sure a deal, that's it, thats the ticket...oh by the way, pst-I got some land for sale up north--see it? You don't have to see it? Trust me, I wouldn't rip you off...LOL

Cheers,

Jatcan

Jatcan:
I also know of a few acres near Chernoble in Belarus. It is a little hot to handle.

Joe

LOL

I'm now getting all possible windows error codes. This time IRQ_NOT_LESS_OR_EQUAL. Both non-ms services were not running and ran a seti.

http://users.pandora.be/haunted/Mini112704-01.dmp

Something I didn't mention already, but now I think about it, better had done a little earlier. Before certain crashes, my screen went black during a second, like something pulled out the plug. And that was always a sign, that I was going to receive a blue screen.

Later today I will update my display driver. Hopefully we can still find a software solution. I rather spend my money on a dvd writer, then on a new psu :)

I've processed three minidump and they have different bugcheck code. Your windows got bugcheck code 50, 8E and 0A and most likely it is memory overlap problem by a device driver and I believe it is nVidia Display Card Driver. Your Nvidia Display card driver is on 18th Nov 2003 which is almost one year behind. It is worthwhile to upgrade nVidia Display Card Driver. You use add/remove to uninstall the display card driver if you encounter more problem after upgrading the driver.
 
nv4_disp.dll Tue Nov 18 03:20:59 2003 (3FB91F9B timestamp)

Minidump112504-01.dmp BugCheck 10000050, {c098fb1c, 0, 804ef379, 2}
         FAULTING_IP: nt+1b379    804ef379 8b449500         mov     eax,[ebp+edx*4]

Minidump112504-02.dmp BugCheck 1000008E, {c0000005, 8053e244, f4a739bc, 0}
         FAULTING_IP: nt+0x6a244  8053e244 897104           mov     [ecx+0x4],esi    

Minidump112704-01.dmp BugCheck A, {4, 2, 1, 804ec30f}
         FAULTING_IP: nt+1830f     804ec30f 895f04           mov     [edi+0x4],ebx

Crashed again with latest nvidia drivers, version 66.93. Was running seti.

Minidump can be found here:
http://users.pandora.be/haunted/Mini112704-02.dmp

got to be psu

We are getting closer to the solution. I've processed the latest dump. The bugcheck is 4E and the failing module is tcpip.sys.  I searched google and there have a lot of hits at tcpip.sys crashes with bugcheck 0A. I think you have to upgrade tcpip.sys.

cpc2004 i am just wondering how a bug check works my thinking is when the computer fails a minidump file is created showing the last actions of the computer from that you can determine which driver or process or software caused the error. can it tell if the computer fails due to a hardware fault or will it still show the last thing done by the software as the problem i wood like your view on this as i dont have a lot of expereance with bugchecks and minidumps do you have any good web sites with info on working with them and any programs that are needed as this info may help me with customers computers at work

andymsmith18
You and me use different approach to handle problem. I'm a software guy and I prefer to resolve the problem at software point of view. Up to now, I think this is a software error. If this is a PSU error, windows restarts without blue screen. Imagine if the PC lose power and all the memory is lose. When the power resumes, the system reboots.

i just did a google using      Event ID: 1003 System Error 0000001a as the search some links came back with driver problems others faulty hardware inc vid cards psu and motherboard and one with a damaged system restore setting try turning system restore off it may be nothing but it wont hurt to check

andymsmith18
Handling software problem, we need multiple minidumps to determine the root cause. The first 3 three minidumps does not have any clues who is the culprit. The last minidump shows the failing module is tcpip.sys and it may be culprit. If we get more minidumps later and the failing module is tcpip.sys. Tcpip.sys is most likley the culprit. Search google with keyword tcpip.sys and you will find a lot of hints with tcpip.sys crashes with various bugcheck code. I'm now in the office after I do more research when I get home.

Hi ClazzeFlits,
Can you recall why did you when the windows crashed? Did you access a particular website and the windows crashed? As I want to gather more information about your problem.

CPC2004

With the last crash, I wasn't behind the pc. Only seti was running.
Some extra information about my config, now the culprit maybe is tcpip.sys, can be helpful: my pc is behind another pc, that's running winroute to provide me internet access.

Maybe the problem at cache memory of CPU or Mother Board.
Download Prim 95 to test the CPU http://www.mersenne.org/freesoft.htm

Tomorrow I have a day off, and I will test then my pc with Prime 95

Just ran torture test, option blend. Prime95 found a hardware failure.

AMD Athlon(tm) XP 2100+
CPU speed: 1734.01 MHz
CPU features: RDTSC, CMOV, PREFETCH, MMX, SSE
L1 cache size: 64 KB
L2 cache size: 256 KB
L1 cache line size: 64 bytes
L2 cache line size: 64 bytes
L1 TLBS: 32
L2 TLBS: 256
Prime95 version 23.8, RdtscTiming=1
Best time for 384K FFT length: 40.956 ms.
Best time for 448K FFT length: 47.834 ms.
Best time for 512K FFT length: 51.694 ms.
Best time for 640K FFT length: 68.563 ms.
Best time for 768K FFT length: 82.334 ms.
Best time for 896K FFT length: 97.197 ms.
[Mon Nov 29 13:08:57 2004]
Self-test 1024K passed!
[Mon Nov 29 13:30:22 2004]
Self-test 8K passed!
[Mon Nov 29 13:54:20 2004]
Self-test 10K passed!
[Mon Nov 29 13:59:35 2004]
FATAL ERROR: Rounding was 0.4717292786, expected less than 0.4
Hardware failure detected, consult stress.txt file.

According to stress.txt, the problem can be a memory, cpu overheating problem or a psu problem.
I'm now going to install MBM to monitor the system better.

Ran the test after second boot, otherwise I could have never got so far in the test :)

Ran torture test, option In-place large FFT for 2 hours 38 minutes, found no errors:

[Mon Nov 29 14:43:36 2004]
Self-test 1024K passed!
[Mon Nov 29 14:59:30 2004]
Self-test 896K passed!
[Mon Nov 29 15:16:02 2004]
Self-test 768K passed!
[Mon Nov 29 15:33:36 2004]
Self-test 640K passed!
[Mon Nov 29 15:49:22 2004]
Self-test 512K passed!
[Mon Nov 29 16:04:56 2004]
Self-test 448K passed!
[Mon Nov 29 16:20:06 2004]
Self-test 384K passed!
[Mon Nov 29 16:38:39 2004]
Self-test 320K passed!
[Mon Nov 29 16:56:18 2004]
Self-test 256K passed!

do you have a desktop fan you can put next to the computer blowing cold air in to it to see if its a heat fault but i am still thinking its the power supply

Ran a torture test, option blend for 3 hours 12 minutes. So it lasted longer than the first torture test, option blend, and it could have last much longer if I hadn't stopped the test myself, but I had to do something on my pc, and the high cpu load would had caused troubles.

@andymsmith18: maximum temperature is 61 degrees celsius during prime test. For an amd, that's not too high during a process that's using the cpu for 100%, imo.

What to do now? Run more torture test's ? I know they advice to run such test's 24H, but I need to find the time :)

cpc2004, you're saying each stress test is around two hours, but doesn't they keep running for ever, until you manually stop them?

61 degrees Celsius is a good temp so we come back to  intermittent fault my guess is psu sorry if i keep saying it but thats what i think your problem is its the only thing except the motherboard that we haven't ruled out yet

No problem that you keep repeating that :)

Those are idd the two parts we haven't ruled out yet. But how to test a motherboard or a psu? In both cases replacement is expensive, and then you wonna be sure that the problem is solved.

Just bought me a dvd-writer, and as long this bizar problem doesn't interfere with my burner, and causes bad burns, I can live with it :)

have a look at this it will test your psu http://www.dansdata.com/quickshot018.htm also search of google for psu tester brings up loads of them.
as for the mobo try this demo prog http://7byte.com/index.php?page=download

Will test wednesday or tuesday, because tonight I don't have the time to run those programs.
I will post test results later this week.

OK no problem just a note the psu tester is a hard ware device you have to perches the chepest i have sean on google was $6 the one in the first link is $28 i just posted that one as its what i use

Bummer! I didn't checked the link before I wrote previous reply.
Tommorow I will test the mobo with hotcpu.exe. If that prog doesn't reports errors, then it must be the psu. On the other hand, it can still be a software problem. Some people swear by saying that a bsod always is caused by software.

Sorry for my very late reaction, but I didn't had time to test my pc thoroughly with hotcpu in the last weeks. Now the holidays are started, I can probably run this last test, and then we can close this thread.

Result of the hotcpu text:

Hot CPU Tester Pro(Lite Edition) 4.2.2
Copyright © 1999-2003 7Byte Computers
Saturday, December 25, 2004 - 18:58:31
Diagnostic Report
---------------------------------------------
Test Started at:  12:15:43
Test Duration:  06:00:01
Physical Processors Available:  1
Logical Processors Available:  1
Multi-Processors System(SMP):  Not Available
Hyper-Threading Technology:  Not Available
CPU Name String:  AMD Athlon(tm) XP 2100+
Speed:  1733MHz
Logical Processors Tested:  CPU 0
Average CPU(s) Performance:  100.0%

 Modules Results:
Complex Matrix:   Finished without error
Calculating Pi:   Finished without error
Sorting Algorithms:   Finished without error
Prime Test:   Finished without error
Fast Fourier Transforms:  
Chipset:  
L1 Cache:  
L2 Cache:  
Memory:   Finished without error
HD:   Finished without error
MMX:   Finished without error
SSE:  
SSE2:  
3DNow!:

No single error found...

hi mate merry Xmas and a happy new year

OK CPU test ran with no problems so we come back to the only other thing not tested the psu

Merry Christmas and Happy New Year to U2!

Idd, it has to be psu. Will replace that piece of junk as soon as possible.

Oops, something went wrong with assigning the points. Accepted answer was from andymsmith18 en assisted answer from jatcan, but they got switched??

I will leave a zero-point question in Community Support and explain what happened.

My email on this question said, Good Assist!, I thought that meant it HAD been done properly? Oh well, glad you found the answer.

Cheers,

J