• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1750
  • Last Modified:

Unexpected System Crashes BSOD

A client has a new system, clean build with Windows XP Home SP2.  All was working fine for the first 2 weeks.  Then he's been plagued with multiple unexpected system crashes BSOD, etc.  I've got a list of the crashes from the event viewer to upload if someone can tell me how to do it.  

Most of the stop errors are as follows:

Error code 00000024, parameter1 001902fe, parameter2 b6723384, parameter3 b6723080, parameter4 f76c269b.

Error code 1000008e, parameter1 c0000005, parameter2 8054a930, parameter3 b72e0c28, parameter4 00000000.

Error code 100000d1, parameter1 3328768f, parameter2 00000002, parameter3 00000001, parameter4 f72f1bd9.

Error code 10000050, parameter1 e558b0c7, parameter2 00000001, parameter3 b7338b04, parameter4 00000002.

Software using is:

XP Home SP2
Norton Inernet Security 2006
AOL 9.0
HP OfficeJet 5610 software
Office 97

System Hardware is:

Intel Celeron 2.13GHz and ASUS P4S8X-MX motherboard in basic tower case with 450W powersupply
512MB RAM
80GB drive
DVD/RW drive
onboard video and LAN
US Robotics modem card to access AOL.
0
comtego
Asked:
comtego
  • 7
  • 5
  • 3
  • +2
1 Solution
 
gecko_au2003Commented:
If you could post back with the event id's that would be helpful as microsoft have a section on there site that lists all the event id's and have solutions ( for the most part on how to fix or work around the issues )

AOL ( at least in the experience that I have heard of from people I know have caused a lot of issues )

Did the customer / person get these bsod's before or after AOL or do they have a rough idea of when it started to do this ?
0
 
gecko_au2003Commented:
As for saving and uploading the logs, save some of the log files about 5 or so to the desktop say and then zip them up and upload them to some free webspace or something along those lines :)
0
 
comtegoAuthor Commented:
The customer had AOL installed prior to these errors.

I've uploaded the files that I do have to my company's server.  FTP into comtego.com with login of nbaits and password of baits.  This is setup as for FTP access only for the next 24 hours.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
gecko_au2003Commented:
If you go here :

http://www.eventid.net/

In the text box near the top put in each of the event id and click on details it gives you further info regarding each one :

event id 1517

http://www.eventid.net/display.asp?eventid=1517&eventno=1206&source=Userenv&phase=1

event id 1003

http://www.eventid.net/display.asp?eventid=1003&eventno=7053&source=Active%20Directory&phase=1

short of that google the event id's ( That is what I would do ( I dont personally know much about them but I am sure this will get you pointed in a reasonable direction.

Hopefully one of the other experts can help you further :)
0
 
comtegoAuthor Commented:
Thanks.  I've googled the event id's prior to posting this request.  The issues appear to be multiple, rather than just one.
0
 
cpc2004Commented:
The crash may be caused by faulty ram or device driver error (ie video, sound card, modem and etc). The system event log and the minidump has the most useful diagnostic information. When Windows crashes with blue screen, it writes a system event 1001 or 1003 and a minidump to the folder \windows\minidump. Check system event 1001 and 1003 and it has the detail of the blue screen.

Event ID: 1001
Source: Save Dump
Description:
The computer has rebooted from a bugcheck.The bugcheck was : 0xc000000a (0xe1270188, 0x00000002, 0x00000000, 0x804032100).
Microsoft Windows..... A dump was saved in: .......

Event Source: System Error
Event Category: (102)
Event ID: 1003
Description:
Error code 1000007f, parameter1 0000000d, parameter2 00000000, parameter3 00000000, parameter4 00000000

Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001/1003. Copy the content and paste it back here

Zip 5 to 6 minidumps to a zip file and attach it at any webspace. I will study the dump and find out the culprit. If you can't provide the minidumps, run memtest to stress test the ram. Make sure that your windows is not infected with spyware, adware adn chkdsk /r.
http://www.memtest86.com/.

Get public webspace
Use a free service like rapidshare to attach the minidumps and post the url of the mimidumps at this thread.
http://www.rapidshare.de/
0
 
nobusCommented:
check the cpu temperature in the bios, after a crash, it may run too high.
And check if all fans are running, clean out all dust too.
0
 
comtegoAuthor Commented:
Thanks for the upload suggestion.  Here's the url of the minidumps

http://rapidshare.de/files/17724572/Richard.zip.html

Memtest was run several weeks ago and no errrors were found.  System is free of dust and all fans are running.

0
 
cpc2004Commented:
NT status code c000001d is illegal instruction which is usually caused by hardware. Some faulty ram can pass memtest. Reseat the memory module to another memory slot. If it still fails, downclock the ram. Two mnidumps are crashed at Norton AV. You had better upgrade Norton AV to latest patch level.

Mini031306-01.dmp BugCheck 1000008E, {c0000005, b6fba970, b6d10800, 0}
Probably caused by : SAVRT.SYS ( SAVRT+30970 )

Mini031506-01.dmp BugCheck 10000050, {e558b0c7, 1, b7338b04, 2}
Probably caused by : ntoskrnl.exe ( nt!ObsSecurityDescriptorCache+b38 )

Mini031506-02.dmp BugCheck 1000008E, {c000001d, 804e0483, b7567998, 0} <-- Hardware error
Probably caused by : hardware ( nt!KiTrap07+11c )

Mini031606-01.dmp BugCheck 100000D1, {3328768f, 2, 1, f72f1bd9}
Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_TimeoutAllEndpoints+133 )

Mini031606-02.dmp BugCheck 1000008E, {c0000005, 66b7eef7, b76ff578, 0}
Probably caused by : SYMEVENT.SYS ( SYMEVENT+fb18 )
0
 
comtegoAuthor Commented:
Here's an update on the minidumps link.

http://rapidshare.de/files/17790916/Richard2.zip.html

A new error occured today which is included above.  I've taken the system to the lab and have run updates for NIS and Microsoft.  So far, no errors.  Note:  The system currently resides in a location where a modem link is the only connection to the Internet.  The lab has DSL connection to the Internet.

After reviewing the latest mini-dumps, do you still recommend reinstalling NIS 2006?
0
 
nobusCommented:
did you check the cpu temperature in the bios after a crash? maybe it gets too hot.
check here the max temp :  www.heatsink-guide.com/maxtemp.shtml
0
 
comtegoAuthor Commented:
CPU Temperature was not checked after the dumps, however, it's been running overnight in the office and remains stable at 33 degrees C.  This is far below the max temp for a Celeron 2.13GHz.  BTW, this system is not overclocked.
0
 
cpc2004Commented:
One minidump is crashed with one bit code corruption and the in-core kernel is corrupted. This is the sign of faulty ram.

Mini032406-01.dmp BugCheck 1000008E, {c0000005, 8054a930, b72e0c28, 0}
Probably caused by : memory_corruption

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
!chkimg -lo 50 -d !nt
    8054a931 - nt!ExFreePoolWithTag+410

      [ 55:15 ]
1 error : !nt (8054a931)

MODULE_NAME:  memory_corruption
IMAGE_NAME:  memory_corruption
FOLLOWUP_NAME:  memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP:  0
MEMORY_CORRUPTOR:  ONE_BIT
FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT

Solution
Usually one bit code corruption can be resolved by reseating memory module to another memory slot.
0
 
comtegoAuthor Commented:
Memory reseated in other slot and memcheck run.  No errors so far, however my delima is that I've got return this back to the owner today and have not been able to recreate any errors!  Any explaination as to why?
0
 
cpc2004Commented:
Usually one bit code corruption can be resolved by reseating memory module to another memory slot.
0
 
cpc2004Commented:
Refer the following case (reseat memory module fix code corruption)
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21690190.html
0
 
comtegoAuthor Commented:
Thanks for the case reference.  I'm delivering it back today and want to keep this open for the next 2 weeks to be on the safe side.
0
 
chingon27Commented:
I've got an XP machine that started having problems after I installed Norton Internet Security 2006. I've found articles that symantec's symevent has had problems causing system crashes but most of the articles refer to windows server. But who knows it may be related.
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

  • 7
  • 5
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now