talljody
asked on
Unresolved BSOD
I built a new system several months ago and started getting the BSOD shortly after all hardware and software was installed. Over the next couple of months I troubleshot extensively everything I could think of from software to hardware. I finally took all the components back (CPU, mobo, memory, video, SATA drive, etc.) and got all new components. Shortly after a complete rebuild, it all started happening again.
Sometimes when I come in in the morney the computer is frozen or there is eveidence that a system crash occurred. Sometimes without reason the BSOD occurs very quickly and the system shuts down. I have sent numerous reports to Microsoft and occasionaly get something back with indicates a driver or software drive conflict. Sometimes it is more specif, like a bad block in the CDROM memory (recently replaced), or video card (also just replaced). Today, after another DSOD, the message returned from the subsuquesnt report stated on the new video card:
Error message: STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRI
View products that this article applies to.
Article ID : 293078
Last Review : November 24, 2005
Revision : 3.8
This article was previously published under Q293078
SYMPTOMS
You may receive one of the following Stop error messages:
STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRI
STOP: 0x100000EA THREAD_STUCK_IN_DEVICE_DRI
The Event Viewer is also showing various repeating errors which are:
1)
svhost -k dcomlaunch:
The machine default permission settings does not grant Local Activation permission
for the Com Server application with CLSID {BC866CF2-5486-41F7-B46B-9
TO THE USER nt aUTHORITY\lOCAL sERVICE sid (s-1-5-19)
Product: Windows Operating System
Event ID: 7036
Source: Service Control Manager
Version: 5.2
Symbolic Name: EVENT_SERVICE_STATUS_SUCCE
Message: The %1 service entered the %2 state.
2)
Product: Windows Operating System
Event ID: 10016
Source: DCOM
Version: 5.2
Symbolic Name: EVENT_COM_ACCESS_DENIED_IN
Message: The %1 permission settings do not grant %2 %3 permission for the COM Server application with CLSID %4 to the user %5\%6 SID (%7). This security permission can be modified using the Component Services administrative tool.
%1 = machine-default, application-specific; %2 = local, remote; %3 = launch, activation; %4 = ; %5 = /; %6 = .
3)
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 1/6/2006
Time: 3:24:41 AM
User: N/A
Computer: JODY
Description:
Error code 100000d1, parameter1 fe0000ed, parameter2 00000002, parameter3 00000001, parameter4 ae9a68d4.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 66 65 eters fe
0030: 30 30 30 30 65 64 2c 20 0000ed,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 31 2c 20 61 65 39 61 01, ae9a
0050: 36 38 64 34 68d4
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
4)
faultrep.dll:
Catogory 102
Event ID 1103
Co.Name. Microsoft
file version 5.1.2600.2180
Source System Error
>>>>>>>>>>>>>>>>>>>
The new system components are:
ABIT AN8 SLI
AMD Athlon 64 3200
Corsair XMS 2 GB TwinX Matched Pair
Diamond Stealth X300SE 256MB PCIE
Seagate 300GB SATA
Seagate 160GB SATA
Toshibia 16X DVD Writer
Any help would be graetly appreciated.
Sometimes when I come in in the morney the computer is frozen or there is eveidence that a system crash occurred. Sometimes without reason the BSOD occurs very quickly and the system shuts down. I have sent numerous reports to Microsoft and occasionaly get something back with indicates a driver or software drive conflict. Sometimes it is more specif, like a bad block in the CDROM memory (recently replaced), or video card (also just replaced). Today, after another DSOD, the message returned from the subsuquesnt report stated on the new video card:
Error message: STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRI
View products that this article applies to.
Article ID : 293078
Last Review : November 24, 2005
Revision : 3.8
This article was previously published under Q293078
SYMPTOMS
You may receive one of the following Stop error messages:
STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRI
STOP: 0x100000EA THREAD_STUCK_IN_DEVICE_DRI
The Event Viewer is also showing various repeating errors which are:
1)
svhost -k dcomlaunch:
The machine default permission settings does not grant Local Activation permission
for the Com Server application with CLSID {BC866CF2-5486-41F7-B46B-9
TO THE USER nt aUTHORITY\lOCAL sERVICE sid (s-1-5-19)
Product: Windows Operating System
Event ID: 7036
Source: Service Control Manager
Version: 5.2
Symbolic Name: EVENT_SERVICE_STATUS_SUCCE
Message: The %1 service entered the %2 state.
2)
Product: Windows Operating System
Event ID: 10016
Source: DCOM
Version: 5.2
Symbolic Name: EVENT_COM_ACCESS_DENIED_IN
Message: The %1 permission settings do not grant %2 %3 permission for the COM Server application with CLSID %4 to the user %5\%6 SID (%7). This security permission can be modified using the Component Services administrative tool.
%1 = machine-default, application-specific; %2 = local, remote; %3 = launch, activation; %4 = ; %5 = /; %6 = .
3)
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 1/6/2006
Time: 3:24:41 AM
User: N/A
Computer: JODY
Description:
Error code 100000d1, parameter1 fe0000ed, parameter2 00000002, parameter3 00000001, parameter4 ae9a68d4.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 66 65 eters fe
0030: 30 30 30 30 65 64 2c 20 0000ed,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 31 2c 20 61 65 39 61 01, ae9a
0050: 36 38 64 34 68d4
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19). This security permission can be modified using the Component Services administrative tool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
4)
faultrep.dll:
Catogory 102
Event ID 1103
Co.Name. Microsoft
file version 5.1.2600.2180
Source System Error
>>>>>>>>>>>>>>>>>>>
The new system components are:
ABIT AN8 SLI
AMD Athlon 64 3200
Corsair XMS 2 GB TwinX Matched Pair
Diamond Stealth X300SE 256MB PCIE
Seagate 300GB SATA
Seagate 160GB SATA
Toshibia 16X DVD Writer
Any help would be graetly appreciated.
By looking at the event viewer errors, your errors seem to be Network related.
Start by looking at these:
The problem is caused by a mismatch of files that occurs when you install Microsoft Internet Information Services. This problem occurs if you install IIS from an installation point that is not running Windows Server 2003 SP1.
http://support.microsoft.com/kb/q276532/
http://support.microsoft.com/?id=280364
http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionId=26456&id=26456
1. Open the registry and go to “HKEY_CLASSES_ROOT\CLSID\{
2. Go to Component Services via Start -> Control Panel -> Administrative Tools -> Components Services. Expand the Component Services branch then expand “Computers”, “My Computer”, and “DCOM Config”. Right-click on "Machine Debug Manager" (or whatever your CLSID represents) and choose Properties. Click on the Security tab and under “Launch and Activation Permissions” select “Use Default”. Click OK, close the Component Services window. The error should disappear now.
I would also suggest you install / reinstall SP2. It contains a couple of fixes for this issue.
Start by looking at these:
The problem is caused by a mismatch of files that occurs when you install Microsoft Internet Information Services. This problem occurs if you install IIS from an installation point that is not running Windows Server 2003 SP1.
http://support.microsoft.com/kb/q276532/
http://support.microsoft.com/?id=280364
http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionId=26456&id=26456
1. Open the registry and go to “HKEY_CLASSES_ROOT\CLSID\{
2. Go to Component Services via Start -> Control Panel -> Administrative Tools -> Components Services. Expand the Component Services branch then expand “Computers”, “My Computer”, and “DCOM Config”. Right-click on "Machine Debug Manager" (or whatever your CLSID represents) and choose Properties. Click on the Security tab and under “Launch and Activation Permissions” select “Use Default”. Click OK, close the Component Services window. The error should disappear now.
I would also suggest you install / reinstall SP2. It contains a couple of fixes for this issue.
ASKER
Thanks for your advise. This is the same information I receieved fron one of the reports Microsoft set after a crash.
I have replaced the video card twice (it was new 256 MB PCIE card with an ATI chipsets). Last night I bought a EVGA GeForce 6500 PCIE card with 256 MB and Nvidia chipset). I did this because I have a ABIT mobo and it has Nvidia chips. After installing it, it happened again.
I have a new version of XP Pro with SP2 and have done 5 seperate installs over the last several months. As mentioned above, I have also replaced the mobo ( Abit AN8 SLI), 2 Gig matched Corsair memory, Seagate SATA HD, which were all newly aquired three months ago. I even bought a new XION case with a 450 Watt power supply in case the old case was shorting tne mobo.
Any other suggestions?
I have replaced the video card twice (it was new 256 MB PCIE card with an ATI chipsets). Last night I bought a EVGA GeForce 6500 PCIE card with 256 MB and Nvidia chipset). I did this because I have a ABIT mobo and it has Nvidia chips. After installing it, it happened again.
I have a new version of XP Pro with SP2 and have done 5 seperate installs over the last several months. As mentioned above, I have also replaced the mobo ( Abit AN8 SLI), 2 Gig matched Corsair memory, Seagate SATA HD, which were all newly aquired three months ago. I even bought a new XION case with a 450 Watt power supply in case the old case was shorting tne mobo.
Any other suggestions?
ASKER
kcarrim,
I am sorry, but I did not see your suggestion under the one written by jigans until just now.
I do not have Windows Server 2003 running on my machine. This computer is a stand alone connected to one other computer in my home via a wireless network. I setup the home network in XP through unsing its network wizard.
In following your advice and located CLSID is BC866CF2-5486-41F7-B46B-9A
When I go to the Component Service to the My Comptuer, when I click on DCom Config, I get a series of DCOM Configuration Warnings! which state:
1st warning: The CLSID (XXXX) item "C:\Program Files\Adobe\Acrobat 7\designer.exe" and the Disigner Clas has the name value AppID, but not recorded under \\HKEY_CLASS_ROOT\AppId. Do you want to record it?
2nd warning: The CLSID (XXXX) item "C:\Progra~1\POWERQ~1\DRIV
DCOM Config then opens amd displays all of the icons of the Services listed. There is no option for NvAppfilterSvr or anything else near to it..
It does not seem to mater on the Warnings if I select "Tes" or No' converning "do you want to record it. If I say yes, then close Componet Services again, I get the same Warnings even though I just had just previously select "Yes" to record it in the AppId.
Thanks for you ideas, do any of this make any more sense?
talljody
I am sorry, but I did not see your suggestion under the one written by jigans until just now.
I do not have Windows Server 2003 running on my machine. This computer is a stand alone connected to one other computer in my home via a wireless network. I setup the home network in XP through unsing its network wizard.
In following your advice and located CLSID is BC866CF2-5486-41F7-B46B-9A
When I go to the Component Service to the My Comptuer, when I click on DCom Config, I get a series of DCOM Configuration Warnings! which state:
1st warning: The CLSID (XXXX) item "C:\Program Files\Adobe\Acrobat 7\designer.exe" and the Disigner Clas has the name value AppID, but not recorded under \\HKEY_CLASS_ROOT\AppId. Do you want to record it?
2nd warning: The CLSID (XXXX) item "C:\Progra~1\POWERQ~1\DRIV
DCOM Config then opens amd displays all of the icons of the Services listed. There is no option for NvAppfilterSvr or anything else near to it..
It does not seem to mater on the Warnings if I select "Tes" or No' converning "do you want to record it. If I say yes, then close Componet Services again, I get the same Warnings even though I just had just previously select "Yes" to record it in the AppId.
Thanks for you ideas, do any of this make any more sense?
talljody
Do you have a crash dump file that i can analyze?
ASKER
What is the name of that file and where would it be located?
Depending on how your system is setup to write the dump. To check these settings, right click my computer, properties, advanced, stratup and recovery. At the bottom of the page select "Kernel memory dump". These files are usually located in C:\Windows\MEMORY.DMP. If a minidump was created, you can find it in C:\WINNT\Minidump. The minidump files usually has a name like : Mini111303-01.dmp
ASKER
I have located 7 minidump files on January 6th, one on January 8th and two others on January 2nd. Most of the files are 92 KB in size except for three which are 88 KB.
There wasn't a MEMORY.DMP file in the system root (or any where else on the drive).
How do I get them to you to analyze?
And thanks for trying to help me get this figured out.
jody
There wasn't a MEMORY.DMP file in the system root (or any where else on the drive).
How do I get them to you to analyze?
And thanks for trying to help me get this figured out.
jody
You can add them to a zip file, then go to www.yousendit.com and upload it. You will receive a link to the download. Check my profile for e-mail or just paste the link here.
ASKER
I just sent you the file to your e-mail. thanks.
Got the file. I will post back with results. ;)
Your XP seems to have only SP1 installed. Did you install service pack 2 as suggested?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the information. The version of XP I have is XP SP 2, which is the original program, not a patch. The information in "System Properties" says:
Microsoft Windows XP
Professional
Version 2002
Service Pack 2
Curious, why it looks like SP1?
I do have Nvida firewall running in the "Hacking only" mode, with Windows as the main firewall, but will remove it on your suggestion.
I will also run the UT program you suggest.
Thanks and I will let you know if this fixes the problem.
Microsoft Windows XP
Professional
Version 2002
Service Pack 2
Curious, why it looks like SP1?
I do have Nvida firewall running in the "Hacking only" mode, with Windows as the main firewall, but will remove it on your suggestion.
I will also run the UT program you suggest.
Thanks and I will let you know if this fixes the problem.
I suppose some of the earlier dumps were before sp2? When running debugger, i was prompted that the symbols were incorrect, so i used symbol pack for sp1, but later changed back to sp2 symbol pack. ;o)
ASKER
That is interesting. I wonder if it might reveal any deeper issue.
This machine is a newly built computer with a fresh drive and a new isnstall of XPsp2. After the install I then installed my propgrams and then miagrated my data files. No old programs were miagrated and only data files like jpgs, docs, html, mp3. etc.
Any ideas?
This machine is a newly built computer with a fresh drive and a new isnstall of XPsp2. After the install I then installed my propgrams and then miagrated my data files. No old programs were miagrated and only data files like jpgs, docs, html, mp3. etc.
Any ideas?
Does not make any sense to me either. By the way, i assume your problem is fixed?
ASKER
So far it has not crashed again, so I hope you are right.
Thank you for all of your help.
Jody
Thank you for all of your help.
Jody
STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRI
CAUSE
This issue may occur if the display driver is caught in an infinite loop while it waits for the video hardware to become idle. This issue typically indicates a problem with the video hardware or that the display driver cannot program the hardware correctly.
RESOLUTION
To resolve this issue, obtain and install the most current driver for your video adapter, or replace your video card.
WORKAROUND
To work around this issue, follow these steps: 1. Click Start, click Control Panel, and then double-click Display.
2. On the Settings tab, click Advanced, and then click the Troubleshoot tab.
3. Move the Hardware Acceleration slider to None, and then click to clear the Enable Write Combining check box.
4. Click OK, and then click OK.
Note This procedure prevents the display driver from programming the hardware incorrectly, but you may lose some display functionality and performance. Although you can increase the hardware acceleration settings higher than None to regain functionality and performance, these settings increase the chance that the issue will occur again. For maximum stability, leave hardware acceleration off.
But if the problem persist even after doing this then I would update system board firmware.